North Korea-tied hackers used Google Play and Facebook to infect defectors