The attack on Sony Pictures has put North Korea’s cyberwarfare program in the spotlight. Like most of the internal workings of the country, not much is known but snippets of information have come out over the years, often through defectors and intelligence leaks. North Korea has a single connection to the Internet, so attacks from inside the country would be easy to trace. Some of the initial attacks to help build this network of infected computers are thought to be launched from North Korean outpost offices in places like China, Russia and India.”]
Source: https://www.csoonline.com/article/2861515/what-we-know-about-north-koreas-cyberarmy.html