North Korean IT workers often operate from insecure, compromised systems, creating a vector for other attackers to breach the hiring company