exploits and 0-day as attribution

Often, attribution of a threat actor can be determined by which vulnerabilities they are leveraging in order to ultimately run their payloads. This is especially true if it is a 0-day; the chances of two groups simultaneously leveraging an 0-day in the same manner within a short period of time is low.

---