North Koreans clone open source projects to plant backdoors, steal credentials