The way the hackers turned computers and servers across the world into hostages was similar to previous cyberattacks attributed to North Korea. "We are talking about a possibility, not that this was done by North Korea," Choi said. But it's possible the code was simply copied from the Lazarus malware without any other direct connection. "We have underestimated North Korea so far that since North Korea is poor, it wouldn't have any technologies. But North Korea has been preparing cyber skills for more than 10 years and its skill is significant.
Source: Bangkok Post May 16, 2017 18:11 UTC