Cyber-attacks can originate from anywhere, but there appears to be an unabated trend of pointing the finger on either "sophisticated attackers" or, more blatantly, naming and blaming nation-states like China and Russia (alright, maybe North Korea and Iran).
The truth about attribution (who is the attacker) is often overlooked for something more dramatic, especially in situations where sensitive information or brand reputation is at risk. Specifically, we see businesses often try to save face by blaming attacks on state actors when they failed to make proper cybersecurity investments by “cutting corners.” While cyber-attacks can be quite damaging to an organization, especially in terms of: