Are you suggesting Russian intelligence took down their own sites? It hasn't been used to justify counterattacks, so I don't see what the benefit would be.
Please pardon the question because your higher comment seemed to imply this line of logic.
Speculation of the identity of Anonymous doesn't do much because it's an unfalsifiable framework no matter what the claim is. Even higher you said that the people taking down the sites and Anonymous twitter accounts were not the same. They likely are the same because they use the same branding. Whether or not the person behind the screen is a government operative is a separate question subject to speculation (that I am not disputing).
Not the people calling themselves “Anonymous” on twitter.