The Post says the malware itself contains sections in Korean and is similar to code found on South Korean networks. But like you, I still remain skeptical