While increased research and information-sharing have improved the process of attribution, a complex threat landscape is also making it more difficult.