Specifically, in their own example they are just citing Mandiant, which may itself be wrong...
https://news.ycombinator.com/item?id=43595294