This statement by the German government is only nine years late. Nine years in which Germany could have upped its game countering aggressive GRU operations. Also a reminder that Germany refused to join allies in attributing NotPetya, despite seeing the evidence at the time.