The United States government came to the same conclusion that CrowdStrike did [0]. And the USG presumably is able to get over the "attribution is hard" problem with HUMINT and SIGINT sources that FireEye and CrowdStrike do not have.

[0] https://www.dni.gov/files/documents/ICA_2017_01.pdf