Right. In current environment it would certainly behoove any other attacker to associate themselves with assumed DPRK entities. Why not take inspiration of their laundering patterns and "donate" some fraction of the bounty to their wallets as cover?

Pinning things on Lazarus is in interest of US agencies, the victim themselves, and industry media.