North Korean WaterPlum hackers infected 30,000 devices worldwide
- On Sept 18, Japan's National Police Agency and international partners including the FBI released findings uncovering the hacking group WaterPlum's methods, revealing direct links between its cyberattacks and North Korean IT worker operations under Bureau 313.
- The hacking group has compromised more than 30,000 devices across over 100 countries, stealing data from more than 7,000 cryptocurrency wallets after targeting developers through fake recruitment campaigns and malicious software like BeaverTail and InvisibleFerret.
- Associated with the 'Contagious Interview' threat, North Korean workers operate under Bureau 313, often resisting relocation while using VPN services to conceal their true locations during technical interviews.
- The Justice Department recently led enforcement efforts involving more than $7.74 million in digital assets, while two men received 18 month prison sentences in 2026 for assisting North Korean workers in accessing company laptops.
- Authorities urge employers to scrutinize candidates by verifying technical skills and ensuring stated residences match IP addresses, particularly when applicants resist relocation or demand cryptocurrency payments.
84 Articles
84 Articles
False technical interviews helped North Korean hackers infect 30,000 devices and empty thousands of digital wallets.
North Korea's cyber threats continue to escalate, with the Infectious Interviews campaign revealing a widespread breach of user devices and the theft of massive amounts of cryptocurrency. The Infectious Interviews campaign compromised 30,000 devices and stole $10.71 million in cryptocurrency. The North Korean attackers behind the Infectious Interviews campaign breached at least… The article Infectious Interviews Campaign: 30,000 Devices Comprom…
India Today
The CSR JournalNorth Korean hackers scam IT job seekers, steal Rs 100 crore
A North Korean hacking group called WaterPlum scammed IT job seekers worldwide. The group gained access to 30,000 devices by sending malicious files to job seekers and stole roughly Rs 100 crore in cryptocurrency.
Coverage Details
Bias Distribution
- 57% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
