Several replies suggest this is North Koreans or other phishing / infiltration / exfiltration ops, and…sure? I mean, everything about it reeks of scam. Who knows which particular scam or who's really the mark, but….
What I'm most interested here is that we're in a situation where apparently this kind of “farm it out” pitch is getting traction again.