NK trains up and operates hacking groups to generate income, not just to be unpleasant. So, guessing that would mean NK is renting out hacking services to China. Other ways to generate income from hacking is operating a ransomware gang, renting out botnets, and gathering banking passwords to use in draining accounts. We may assume they are involved in all of the above.