But while attribution “is great for pointing fingers and laying blame” and titillating the media, “during an active attack, it doesn’t matter who is attacking you or why,” said Chris Morales, head of security analytics at Vectra.