[Trendseeker]

No country has been named in the news so it is open to speculation, however, the IT security and network admin teams usually have software such as Fireeye that can reveal the country that the attacks originate from, so they are likely to know.