Why do you think it's "highly likely" to be a "Russian state or state backed unit" which carried out the attack?

Can't you simply read the emails published by Grayzone News and confirm if they have been "altered or faked"?

Thanks