Several artifacts from recent attacks strongly suggest a connection between the two operations, researchers say.