> the cites you have are all based on speculation and vague allegations by US officials

Totally untrue. It was also confirmed by officials from affected companies as well as Cybersecurity monitoring companies. There is quite a bit more detail and substantiation -- even in the Wikipedia article -- than you are acknowledging.