A previous assessment gave only a low confidence assessment that the activity had a "nexus" to China, but a Mandiant researcher told SC Media they have since discovered a number of additional links.
Article Link: Mandiant more confident Chinese hackers were behind VMWare hypervisor malware campaign | SC Media