Considering their likely military budget, it's not hard to imagine they could train a small percentage of the military in cyberespionage. Or they could outsource it to other nation-states or organizations. It isn't that difficult to find talented, (ostensibly) nationalistic kids, train them for years, and have them conduct operations like this.
