BBC podcast The Lazarus Heist https://pca.st/podcast/275614b0-7ad7-0139-3480-0acc26574db2 Provides a lot of details on this whole area. Very highly recommended.

Edit: good article! CNN has upped the webdev game.

I'm not a fan of RTO because the commute is so much better in WFH, but remote employees can execute more interesting scams and this one can be impactful.