Investigators suspect the attack may have been carried out by TraderTraitor, a North Korean state-sponsored hacking group.