Researchers disclosed the bug to Microsoft after examining a long-running campaign by North Korean hackers to exploit the job application process.