What is your proposed test? Detecting a nuclear explosion or traces of chemical-weapons manufacturing is easy compared to figure out who made some malware component.