Re: "I'm always surprised how they supposedly also manage to be some of the most cunning and evil actors when it comes to hacking."

I sort of suspect this is just the result of a nation state that is willing to be a pariah. That is, I think nearly any large state could do it if they didn't mind burning bridges.

See also Russian hackers being notorious simply because Russia is willing to turn a blind eye to cyber crime that doesn't target Russia

Crime being illegal doesn't prevent crime, but it adds an enormous amount of friction. In the West if you are decent at hacking, low-level APIs or reverse engineering you could turn to cyber crime. But if you instead get a regular job in cyber security or software engineering you still get a good salary, and don't have to worry about your online friends being police informants, can tell your potential significant other what you do to earn a living, get money wired directly to your bank account instead of having to go through costly intermediaries with significant risks, don't have trouble with the tax authority, etc.

If you reduce the legal opportunities and remove the downsides of the illegal ones the calculation completely changes, and with it the talent pool

It’s not just that they don’t care about being a pariah state, it’s a literal fund raising exercise, unlike most other state sanctioned hacking.

This is my assumption as well. In general it seems like hacking becomes a lot easier (still not easy of course, just easier) when you have no fear of getting caught or going to jail.

Does anyone remember LAPSUS$ https://en.wikipedia.org/wiki/Lapsus$ from a while back? It was reported for a while that it was largely made up of teenagers, and it seems two did get caught. I recall their whole MO being brazen social engineering/using stolen credentials in a way that got them caught pretty quickly, but also got results fast.

"Pariah", they've had the longest embargo on earth (which has caused hundreds of thousands of deaths), they had 90% of their whole countries infrastructure bombed by the US, and the Korean war has been called a genocide in the North by many scholars.

The world doesnt make sense if you ignore history.

They probably hack for the same reason the west does it: attack/defense and money.