The Cybersecurity and Infrastructure Security Agency is attributing the campaign to hackers known as the Lazarus Group.