"...But a 2011 presentation to the NSA and its foreign partners by Canada’s signals intelligence agency, the Communications Security Establishment, undermines the notion of a foreign hacker so skilled that a victim would never know their identity. The document calls Russian hackers “morons” for routinely compromising the security of a “really well designed” system intended to cover their tracks; for example, the hackers logged into their personal social and email accounts through the same anonymizing system used to attack their targets, comparable to getting an anonymous burner phone for illicit use and then placing calls to your girlfriend, parents, and roommate..." https://theintercept.com/2017/08/02...be-caught-but-nsa-partner-called-them-morons/
There is another side to that, if you are engaged in false flag activity, you must somehow make sure there is some "evidence" that points to the state you intend to be blamed for what you did. So when the trail of evidence appears ludicrously stupid, you should probably consider the possibility it was planted. Especially when you consider, no one would be more aware of how careful you need to be if you don't want to be caught doing things like that, than computer hackers because they are the ones who make careers out of using their superior intelligence to exploit others stupidity.