It has never been confirmed it's anything but it's been extensively researched and it's pretty obvious what it was.

It's not like this highly-targeted Siemens controller worm was a cryptojacker written by a bored teenager.

Could have been a very sophisticated false flag self sabotage for no visible reason. (Not that I believe that, or think that it shouldn't be called an attack)

This is true of literally anything and therefore is not helpful to the discussion.

Occam's razor

> if there was any attack in the first place.

So Stuxnet just randomly self-assembled on the Internet, to attack very specific air-gapped industrial controllers?

It evolved over billions of memory bit errors from the Code Red virus.

Well that is basically how we came into existence, right? Its not like some all powerful creator programmed our DNA. So, the same random events can happen with computer viruses.

It is orders of magnitude of orders of magnitude less likely.

In the same way it was never confirmed that Israel has nuclear weapons?

The code has been analysed and it is well known how it worked and what it does. How can it not be called an attack?

Even if this happened, why would someone confirm it and how will it be confirmed? Does US or any other country confirm that they are carrying out espionage program in other parts of world?