As someone very familiar with hacking, I can say definitively that hackers and other threat actors can often very easily mask their real identities. They can also frame other people for their actions.
They only need to manipulate the metadata. The CIA admitted that they do this as well in Vault 7.
As such, any claims by journalists with arts degrees that they somehow know definitively what is happening in the cyberspace are fake.