content: I don't know how they can ascertain if a particular piece of software was state sponsored or not.  The same way you can ascertain if a jet plane was built by Lockheed Martin or Cessna just by looking at it. It's complexity, it's cost, the amount of human resources needed to build it. There is a maximum level of complexity that can be achieved by individuals and small groups. A dozen skilled engineers might be able to build a Cessna, but they are never going to build an F-35. It's impossible. That same kind of engineering logic can be applied to building anything, even software. When you see malware that is more comparable to an F-35 than a Cessna, it starts becoming apparent that it would be impossible for any group that didn't have resources on the level of a state sponsored organization to build it.