Suspected North Korean IT workers joined a fake crypto startup — without realizing their every move was being tracked to extract valuable intel.