[nsonha]

> its not likely that someone looked the source IP being from Vietnam and made the conclusion

Yes it's not likely simply because the phrasing of the article suggested that. My point is that we should stop trusting such phrasing. The article also mentions that it started with social engineering on Twitter, so do Twitter have some sort of tool that somehow allows them to conclusively identify government hackers?