If they don't, they still probably have some offshore funds which they can use to hire criminal groups to perform such attacks.

Anyway with current information one can only speculate on what just happened in Korea and who was behind it.