Why should they?
It is "easy" money for them in some cases. It doesn't matter if we are in a bearish or in a bull market there is a chance for hackers in making money anonymously so they don't miss the chance to do it even in the Crypto Winter.
Well said. If you think logically, exchanges right now are as stacked with coins as they were during the peak of 2017s bull run. Hackers start with $0 and end up with whatever amount they end up with. Everything above $0 is a gain for them.
Another thing is that everything related to Russia and North Korea allows news outlets to generate cheap clicks, especially with these headlines, so take it with a grain of salt.
State hackers are good in making it look like it was x country that initiated a cyber attack, while in reality it's not like that at all. It's too easy to put all the blame on North Korea, regardless of how much we dislike them.