We need a comprehensive and holistic approach with a legal framework and technical expertise for attribution. This is going to take a lot of time, effort, and political will. We need a multilateral cyber security strategy by nation-states and we need awareness on the level of political decision-makers.