It was a very extensive operating, over several years, targeting individuals, business, military and government agencies in the US and abroad, and bank and crypto institutions.
The programmers who were charged are part of a North Korean military intelligence agency. How they have pictures of the programmers and how they know that these specific programmers were involved, I don’t think we’ll know.
But the point I wanted to share, and it shows how absurd North Korea can be, is that it appears some of the targets were selected out of revenge. Specifically, Sony Pictures and AMC Theaters were targeted because of their involvement in the production and release of the comedy movie “The Interview”, which depicts the assassination of North Korea.
It’s almost laughable, if not for the victims of the theft.