Researchers remain unsure of the source of a major distributed denial-of-service attack, which temporarily crippled dozens of international government and financial websites.