Reuters reports, citing an unnamed US official, that an investigation found that North Korea was responsible for the Sony hack and also found there could be a Chinese link, possibly by using Chinese servers.
I understand this was one of the slides presented with the US investigation.
Surely the sources are legit
