A major security breach that allowed hackers to steal an estimated $1.5bn (£1.1bn) of cryptocurrency has been linked to a North Korean cybercrime group, according to experts.