"False Flag" is a term of art describing intelligence operations designed obscure the originator of an action, deflecting responsibility for that action to a 3rd party. Cyber-attacks are notoriously difficult to attribute and "false flags" are designed to make it that much more difficult to identify and confirm a cyber adversary, One more reason to take former offensive cyber operators and put them on the defense. "Tradecraft" and intimacy with the offensive playbooks are essential to effective detection and counter-measures.