The Lazarus Group exploits recruitment platforms like LinkedIn to pilfer $3.4bn in crypto in a wave of social engineering and phishing attacks