A few hints that tickle my spider sense: 1. Yandex is an email provider that is almost exclusively to the new Russian sphere of influence. This is a the first

A few hints that tickle my spider sense: 1. Yandex is an email provider that is almost exclusively to the new Russian sphere of influence. This is a the first thing that would jump out to an attribution analyst. Combined with the non-native language mistakes, a first pass analysis would indicate Russia. But the name of the game is deception. 2. The "mistakes" in the text are not those which a Russian-speaker would make. The most obvious signal is leading space before the comma.