To take the last high-profile ransomware gang stopped, if we ignore for a moment that the US didn't find them, you think sending US special forces into Ukraine to arrest or kill some unarmed dudes in a basement would have aided US interests more than just having local law enforcement arrest them? Does this policy of deploying troops expand to gangs in NATO member states and other close allies?

>If people attacked our hospitals and pipelines with explosives we wouldn't sit by and do nothing.

You are proposing that we attack them with explosives, are you fine with them retaliating in kind?

What if you lived next to some hackers targeting a foreign country, would you think it's acceptable to get blown up for their actions?

Precisely ascribing the origins of a malware attack, with 100% confidence, to one specific nation state is a very hard problem to solve. The time/effort that it would take for one nation to launch an attack on a 2nd party, seeming to come from a third-party, or one of their own adversaries, is not very great.

At least not with the 100% confidence that politicians would want before the US military starts dropping JDAMs on buildings.

I would give fairly even odds that something like this is the work of an organization nation state, and also even odds that it's the work of some underemployed teenagers in a basement.