A company was hacked after it hired a North Korean cyber criminal posing as an IT contractor.