North Korean hackers stole 'highly sensitive information' from Microsoft users, company alleges

I'm still suspicious that North Korea is this sophisticated and that some other foreign entity is spoofing.

"Hackers also used deceptive websites to trick users into believing they were on a legitimate Microsoft websites and email attachments to distribute malware. Specifically, malware identified in the complaint as "BabyShark" and "KimJongRAT" were used to "compromise systems and steal data from victim systems," the complaint says."

https://www.cnn.com/2019/12/30/tech/microsoft-hackers-lawsuit-north-korea/index.html

For this discussion, probably fine to accept North Korea = China.

From China's perspective, any resources the US spends defending against NK are resources not being allocated to deal with China.