As a prior I don't think it's at the level of "when you see a hack you should assume it's north korea"