North Korean IT workers are notorious for their ability to infiltrate multinational companies, masquerading as foreign nationals and exploiting remote-work practices to earn millions for the regime.

But it turns out that even the DPRK’s master imposters can be duped.

In a recent operation, a pair of cybersecurity researchers infiltrated a North Korean IT workers cell by trapping state-sponsored actors inside controlled virtual environments for weeks, documenting their every move to capture a rare first-hand look at how they operate.

In a report published Thursday, Mauro Eldritch of cybersecurity firm Birmingham Cyber