This tactic fails too often because criminals are adept at obfuscating their attackcode, allowing their activity to remain undetected for long periods of time.
Like most malware attacks, there are clues as to its origin - however security experts warn that any calling cards found within the attack's code could in fact be an attempt to throw investigators off the real scent.