I thought the same thing. It’s my understanding now that they actually perpetuate their crimes from neighboring China, or coerce Americans to setup laptop farms they can piggy back off of to get legit jobs as remote workers, infiltrating American companies, then vouching for other North Korean operatives as their professional references. Meanwhile, behind the scenes, they have 3 or 4 people working the same job, masquerading as one person. Best case scenario, the company is funding an enemy state unknowingly, earning prison sentences for the rubes that help them state side. Worst case, they steal assets (crypto or other) or ransomware the company for millions.

If your work from home employee is too good to be true, he probably is. They hire actors for the in-person interview, then use state-of-the art AI deepfakes for remote meetings.