Explained in plain English

How do they know it's Iran?

Paris prosecutors cited the use of Farsi language and internet addresses pointing to devices in Iran as evidence. While cyber attribution is complex, these clues provide strong indicators of origin. Such digital forensics help link attacks to specific actors or locations, though definitive proof can be challenging to obtain and verify.