Re: China is a Russian "ally" -- Suuuuuuuuuuuuuuuuuuure
If I was in Russia and creating Malware I'd make it look like it was from China, and if I was in China creating Malware I'd make it look like it had Russian origins. But if I was in North Korea writing malware I'd add some indicators to give people both of the two "sources" to everything.
Malware is everywhere ... this is malware-change these days, all organizations need to start assuming that they will be hacked and all their data lost, moving to an environment where there is zero-zero access to their data from outside and only read-only access internally. Update the data internally via a keyboard with multiple inaccessible backups.
Sure - this is not going to be easy but malware is easy so everything harder is safer.