It is rather easy to track these attacks. Accurately identifying the originator can be work, but it's not as hard as it sounds (although I doubt you will find the necessary information in the public domain). Even CIA/NSA would have trouble faking the origin convincingly if Turkey, perhaps with Russian help, understood how to check track the attackers down.
Finding it hard to believe if Turkey knows for certain who did it since they haven’t retaliated. Also, 12 hours is a very quick turnaround. Smells more like smoke and mirrors.