The paper authors and (most) media writing about it are pretty clear to state that the command and control servers are in china but that they don't have the facts yet to state anything about who may be operating it.

The most damning facts implicating the Chinese government are from cases where it looked like China was acting on intelligence received from the ring but in all the examples cited it was clear that the 'targets' could also have been directly attracting China's attention in ways that have nothing to do with this ghostnet.

 Reply