Timezone
Since the hackers are so diligent with their hours(!), couldn't the timing of the activities give a clue to the timezone? If they're starting at 7am India time, it's unlikely to be in China, and more likely to be in a timezone to the west of them..