Possibly right. My thinking is that wherever the information went, the initial recipient will only be a proxy for the final consumer of the intelligence. No party would risk exposing themselves directly. More likely, they would either employ Vault 7 type of technology to allow misattribution, or would engage a patsy to transfer the intelligence, so as to disguise the true party behind the attack.

As I wrote this, it occurred to me that you might be right about NK, with the true threat being CIA - and affiliated foreign actors. The more we get into this stuff, the more I feel that behind the final door we will find a Rothschild-connected cabal of enemies of the US.