Usually if North Korea or Russia did it, they say North Korea or Russia did it.
Plainly I have no real evidence for this, other than the constant lack of evidence for their claims, and the doubts that are cast within the infosec community when data is available.