The decision to use a cyberattack as an information operation release or keep it as an O-Day can affect the return on investment. As seen in the NotPetya attack, releasing it as an O-Day would have caused more damage outside of the targeted country and created panic.