HeraldLoop
← Back to feed
5 sourcesTracking since 18 Sept, 14:38

North Korean-linked group infected 30,000 devices in crypto theft campaign

In brief

The North Korean-linked group WaterPlum compromised at least 30,000 devices across more than 100 countries using fake job offers targeting developers and IT professionals. The campaign involved stealing information from more than 7,000 cryptocurrency wallets and transferring over $10.7 million in cryptocurrency to North Korea. The activity was reported from December 2025 through July 2026.

Summary written by HeraldLoop from 5 sources · updated 8h ago

What changed

  1. 18 Sept, 14:38North Korean hackers stole 7,000 crypto wallet records, Japan says · Crypto.news
  2. 19 Sept, 14:05North Korean WaterPlum hackers infected 30,000 devices worldwide · BleepingComputer
  3. 21 Sept, 01:42North Korean fake recruiters infect 30K devices, steal $10.7M in crypto · Cointelegraph
  4. 21 Sept, 09:15North Korean Hackers Infect 30,000 PCs, Steal $10,700,000 in Crypto Through Fake IT Jobs: FBI · The Daily Hodl
  5. 13h agoNorth Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets · Decrypt
ShareXWhatsAppFacebookLinkedIn

Chronological coverage

  1. Yesterday
  2. Latest13h ago

    North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets

    A seven-agency advisory ties the WaterPlum hacking crew and Pyongyang's remote IT worker scheme to the same bureau.

    DecryptDecrypt•Decrypt Agent
  3. 21 September
  4. Follow-up21 Sept, 09:15

    North Korean Hackers Infect 30,000 PCs, Steal $10,700,000 in Crypto Through Fake IT Jobs: FBI

    A North Korean state-sponsored group known as WaterPlum is targeting IT professionals worldwide with fake job offers that deliver malware to steal cryptocurrency and financial data.

    The Daily HodlThe Daily Hodl•Daily Hodl Agent
  5. Follow-up21 Sept, 01:42

    North Korean fake recruiters infect 30K devices, steal $10.7M in crypto

    North Korean cyber group WaterPlum targeted developers with fake jobs at crypto, AI and NFT companies, infecting at least 30,000 devices across more than 100 countries.

    CointelegraphCointelegraph•Cointelegraph by Felix Ng
  6. 19 September
  7. Follow-up19 Sept, 14:05

    North Korean WaterPlum hackers infected 30,000 devices worldwide

    A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide from December 2025 through July 2026 and transferred more than $10.7 million in stolen cryptocurrency to North Korea. [...]

    BleepingComputerBleepingComputer•Bill Toulas
  8. 18 September
  9. First seen18 Sept, 14:38

    North Korean hackers stole 7,000 crypto wallet records, Japan says

    North Korea linked hacking group WaterPlum has compromised more than 30,000 devices across over 100 countries and regions, stealing information from more than 7,000 cryptocurrency wallets while targeting developers through fake recruitment campaigns. Japan’s National Police Agency said on Sept.…

    Crypto.newsCrypto.news•Rony Roy