It's partly a matter of jurisdiction. Most of the time criminals are in the same location as their alleged crimes. Not so with hacking over the internet. Thats one reason why "cyber" gets special treatment and can be tricky.
And that's ignoring the implications of it possibly being a state actor.
And that's ignoring the implications of it possibly being a state actor.