'We assess with high confidence that this activity is carried out on behalf of the North Korean government...' cybersecurity firm says