Well, it’s a pretty simple equation to solve. Who has access to this type of technology, and who would be able to conduct these kinds of operations in Moscow, Serbia, and Havana? That’s a very short list of suspects.
It has to be self-inflicted.
That would be easily falsifiable if other nations had embassies with the same issues.