It seems like these North Korean IT guys are actually pretty tech savvy and can actually do the job and work -- but they are doing recon at the same time with malicious intentions. An unskilled scammer would get caught every time and couldn't do the work.

I mean it would make sense to hire these NK guys to consult DevSec teams if it wasn't for the travel restrictions in NK -- sort of like how reformed black-hat hackers get legit jobs in the IT sec industry.