"I'm always surprised how they supposedly also manage to be some of the most cunning and evil actors when it comes to hacking"

This sentiment is probably overblown. The fact that they are effectively robbing people to earn some money for their pathetic regime means only that they are on the level of nowadays internet scammers. They are good at that too.

Spending enough money (and they spend a lot - 26 million people work only for this) one can train people to do this or hire people to do this for them.