I doubt many 'hackers' manufacture the malware themselves these days. Many buy/copy from others.

And we keep saying NK doesn't have enough capable human talent but they developed nukes and launched a mid range ballistic missile. Surely they can lock up some men in a building and teach how to run malwares?

IF NK paid for it, they are responsible still.