A massive remote-work scam fooled 300 US companies into hiring North Koreans, prosecutors say