South Korean military and police investigators said a North Korean hacker recruited a civilian cryptocurrency investment executive and an active-duty army captain through Telegram and Bitcoin payments. The suspects allegedly helped prepare an attempted compromise of the Korean Joint Command and Control System by providing login materials, using a hidden camera, and procuring Poison Tap-style USB hacking components. Authorities said the battlefield network was not breached, but the officer separately sent military materials and images to the North Korean contact. The case matters because officials described it as the first confirmed instance of an active-duty South Korean officer being recruited by a North Korean operative solely through social media without direct contact.