Comment Comment by traes TRM Labs[0] claims it is indeed NK[0]: https://www.trmlabs.com/resources/blog/north-korea-steals-us... parent traes 2 days ago
[0]: https://www.trmlabs.com/resources/blog/north-korea-steals-us...