Virulent WCry ransomware worm may have North Korea’s fingerprints on it
arstechnica.com
arstechnica.com
Claiming that a few generic code routines are identical to Lazarus hacking tools is like calling every malware that uses RC4 or RC5 an NSA cyber-weapon.
This is just some hype created by Kaspersky's PR.