Why It’s So Hard to Stop a Cyberattack—and Even Harder to Fight Back