International Security Agencies Warn About North Korean Hackers Exploiting Job Seekers to Steal Crypto, Data
Japan says WaterPlum used fake recruitment to infect more than 30,000 devices and steal records from over 7,000 cryptocurrency wallets.
- On Sept 18, Japan's National Police Agency and international partners including the FBI released findings uncovering the hacking group WaterPlum's methods, revealing direct links between its cyberattacks and North Korean IT worker operations under the Bureau.
- The hacking group has compromised more than 30,000 devices across over 100 countries, stealing data from more than 7,000 cryptocurrency wallets after targeting developers through fake recruitment campaigns and malicious software like BeaverTail and InvisibleFerret.
- Associated with the 'Contagious Interview' threat, North Korean workers operate under the Bureau, often resisting relocation while using VPN services to conceal their true locations during technical interviews.
- The Justice Department recently led efforts involving more than $7.74 million in digital assets, while two men received 18 month prison sentences in 2026 for assisting North Korean workers in accessing company laptops.
- Authorities urge employers to scrutinize candidates by verifying technical skills and ensuring stated residences match IP addresses, particularly for remote roles where applicants demand cryptocurrency payments or avoid detailed questioning.
29 Articles
29 Articles
International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data
International security agencies warned that North Korean hacker group WaterPlum is posing as prospective employers to target job seekers and steal millions in cryptocurrency.
North Korean hackers stole 7,000 crypto wallet records, Japan says
North Korea linked hacking group WaterPlum has compromised more than 30,000 devices across over 100 countries and regions, stealing information from more than 7,000 cryptocurrency wallets while targeting developers through fake recruitment campaigns. Japan’s National Police Agency said on Sept.…
The hackers linked to North Korea, through fake vacancies, attacked IT engineers in over 100 countries, infecting tens of thousands of devices and stealing almost $11 million in cryptating.
“" "Arbeids" "”, “" Hare" "”, “" Arbeids" "”, “" Hare" "” On the 18th, the government announced the attack modus operandi of the cyber attack group “Waterplum” with North Korea in the background and the actual state of foreign currency acquisition activities and recruitment application activities by North Korean IT workers, and called for caution. “" " Rastar Daredevil Daredevil, Darebah Mawarah Mawarah Al Rahman.
<p>North Korean hackers attacked IT engineers in 100 countries and stole nearly $11 million worth of cryptocurrency. North Korean hackers infected more than 30,000 devices through fake jobs and stole $10.9 million worth of cryptocurrency. Funds transferred to DPRK.</p>
In front of a North Korean cybergroup, IT professionals should pay particular attention to job search, reports several international security agencies, including German intelligence services. It is not the only campaign from North Korea to be warned of.
Coverage Details
Bias Distribution
- 46% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
