Researchers set up a fake start-up company to study fraudulent North Korean IT workers.