Cyber attacks are probably the least interesting enterprise that North Korea is involved in [1]

They're also involved quite heavily in the illegal drug trade and bootlegging cigarettes and alcohol, using their embassies and diplomats as a distribution network, as well as counterfeiting currency and pharmaceuticals, running an international restaurant chain [2], building statues for tinpot dictators [3], shipping citizens off to Russia as "contract workers", smuggling ivory, trafficking arms, and previously leased out embassy buildings in Berlin to a hostel [4]

[1] https://en.wikipedia.org/wiki/North_Korea%27s_illicit_activi...

[2] https://en.wikipedia.org/wiki/Pyongyang_(restaurant_chain)

[3] https://www.bbc.com/news/magazine-35569277

[4] https://en.wikipedia.org/wiki/Embassy_of_North_Korea,_Berlin

The expression "state sponsored terrorism" is vague and subject to a lot of biases. For what it's worth, most state-sanctioned cyberattacks are _not_ profit oriented. They rather aim to disrupt the operations of an organization (see: American cyberattacks against ISIL), establish deterrence (see: the US allegedly planting digital "bombs" in Russia's networks), collect intelligence (see: the OPM hack). The exception being North Korea, a state that conducts cyberattacks for the explicit purpose of making money.