"Russia-aligned cyber-criminal groups"
"Russia-aligned malicious actors"
"Russia-aligned cyber-espionage groups"
"Russia-aligned cyber-warfare groups"
All of these are better, more clear, and more relevant to the actual attack that is being reported on.
All of these also avoid implying responsibility of some nebulous hackers and harmfully stereotyping a global creative community.
And it took me a few seconds to come up with these.
Come on, @arstechnica , you can do better.