// definition
Cyber attribution
Linking cyber activity to responsible actors
Short definition
An assessment linking cyber activity to related operations, a group or a responsible actor. Technical clustering, identifying people and political attribution answer different questions. A finding should state its evidence, uncertainty and status.
risk atlas
Knowledge map
Related analyses
Primary sources
- CERT-EU, Cyber Threat Intelligence Framework, revision 8 April 2026Sections 10–11: technical and political attribution and limits of geographic links.