When hackers use tor or irc or proxies to attack or use CNC servers behind these to evade. Why can't they be traced?
For example, something like wanna cry or any other known malware, when something is happening which is affecting globally then why can't they find the chain as every new proxy or VPN does have the IP from which they are connected from?
Even if connected to about 10 proxies and 10 VPNs we can always backtrack to the original source. And when things happen at such international levels, countries do there best to use all legal ways to find.
If today I have a VPN company and I get to know that I am stuck in some legal problem so obviously ill reveal the connections and logs and so would all the people in the chain. Finally reaching to the ISP of the source and then to the person.
Still, hackers evade how?