Mapping observed tooling back to a cluster may not actually represent the true organization structure of the attackers.” In his 15-page report, he noted that, earlier this month, the US Department of ...