DPRK seems to know a LOT more than HTML. They are not dependent on (read vulnerable to) the Internet in the burgeoning ways of the rest of the world. They clearly see it asymmetrically, as our Kryptonite:
This doesn't tell me they know what they're doing. This tells me they are scrambling for a few million here and there when they can. Wouldn't you guess that a state funded actor could be much more dangerous than encrypting your personal files and demanding $400 while leaving a kill switch easily available?