Joint investigation by BCA LTD, NorthScan, and ANY.RUN uncovered North Korea's persistent infiltration scheme using remote IT workers tied to Lazarus Group's Famous Chollima division. For the first time, researchers captured this network of remote workers live on camera. The investigation reveals one of North Korea's most persistent methods for infiltrating organizations through fake remote employees. This represents a significant advancement in understanding Lazarus Group's operational tactics and their use of human assets for corporate infiltration.