Two analytics firms say they have robust intelligence pointing to a North Korean state-backed group as the likely culprit.