International Security Agencies Warn About North Korean Hackers Exploiting Job Seekers to Steal Crypto, Data
Japan says WaterPlum used fake recruitment to infect more than 30,000 devices and steal records from over 7,000 cryptocurrency wallets.
- On Sept 18, Japan's National Police Agency and international partners including the FBI released findings uncovering the hacking group WaterPlum's methods, revealing direct links between its cyberattacks and North Korean IT worker operations under Bureau 313.
- The hacking group has compromised more than 30,000 devices across over 100 countries, stealing data from more than 7,000 cryptocurrency wallets after targeting developers through fake recruitment campaigns and malicious software like BeaverTail and InvisibleFerret.
- Associated with the 'Contagious Interview' threat, North Korean workers operate under Bureau 313, often resisting relocation while using VPN services to conceal their true locations during technical interviews.
- The Justice Department recently led enforcement efforts involving more than $7.74 million in digital assets, while two men received 18 month prison sentences in 2026 for assisting North Korean workers in accessing company laptops.
- Authorities urge employers to scrutinize candidates by verifying technical skills and ensuring stated residences match IP addresses, particularly when applicants resist relocation or demand cryptocurrency payments.
30 Articles
30 Articles
FBI: This North Korean Group Infected 30,000 PCs To Steal Crypto
The FBI is warning about 'WaterPlum,' a hacking group out of North Korea that's been preying on job seekers looking for IT positions. The group will also apply for remote IT jobs too. A suspected North Korean hacking group has been blamed for infecting 30,000 PCs across the globe in an effort to steal cryptocurrency from unsuspecting users. On Friday, the FBI issued an alert about “WaterPlum,” a hacking group allegedly from North Korea that’s be…
International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data
International security agencies warned that North Korean hacker group WaterPlum is posing as prospective employers to target job seekers and steal millions in cryptocurrency.
North Korean hackers stole 7,000 crypto wallet records, Japan says
North Korea linked hacking group WaterPlum has compromised more than 30,000 devices across over 100 countries and regions, stealing information from more than 7,000 cryptocurrency wallets while targeting developers through fake recruitment campaigns. Japan’s National Police Agency said on Sept.…
The hackers linked to North Korea, through fake vacancies, attacked IT engineers in over 100 countries, infecting tens of thousands of devices and stealing almost $11 million in cryptating.
“" "Arbeids" "”, “" Hare" "”, “" Arbeids" "”, “" Hare" "” On the 18th, the government announced the attack modus operandi of the cyber attack group “Waterplum” with North Korea in the background and the actual state of foreign currency acquisition activities and recruitment application activities by North Korean IT workers, and called for caution. “" " Rastar Daredevil Daredevil, Darebah Mawarah Mawarah Al Rahman.
<p>North Korean hackers attacked IT engineers in 100 countries and stole nearly $11 million worth of cryptocurrency. North Korean hackers infected more than 30,000 devices through fake jobs and stole $10.9 million worth of cryptocurrency. Funds transferred to DPRK.</p>
Coverage Details
Bias Distribution
- 42% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
