>Perhaps the identified attacks have been previously linked with the PRC

I'm sure the PRC has used password spraying before, the only detail mentioned. Tgatd about as easily forged as the IP address though.