ChainDrop and PolinRider Use Blockchain C2 to Steal Cloud and CI/CD Credentials
ChainDrop and North Korea-linked PolinRider use blockchain C2 to steal cloud and CI/CD credentials.
78
Threat actor
Contagious Interview
- Mentions · 7d0
- Mentions · 30d1
- All mentions5
- First seenSep 18, 2026
- Last mentioned25d ago
Timeline
5 articles · newest firstNorth Korean Attackers Hit 30,000 Devices and Steal $10.7m
North Korea's WaterPlum infected about 30,000 devices and stole roughly $10.7 million in cryptocurrency.
82
North Korea’s job interview scam runs both ways
North Korea's Contagious Interview group targets Rust developers with fake job scams to steal credentials and crypto, infecting 30,000+ devices.
68
North Korean WaterPlum Hackers Target IT Professionals With Fake Job Interviews to Steal Crypto
North Korean WaterPlum actors used fake job interviews to infect 30,000 devices and steal crypto from 7,000+ wallets, netting roughly $10.71 million.
76
International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data
US, Japanese, German, and Australian agencies warn North Korea's WaterPlum gang poses as recruiters, infecting 30,000+ devices and stealing about $11 million in crypto.
78
Appears with
- WaterPlumthreat actor · 4
- npmproduct · 3
- Visual Studio Codeproduct · 3
- 313 General Bureauorganization · 2
- InvisibleFerretmalware · 2
- BeaverTailmalware · 2
- StoatWafflemalware · 2
- OtterCookiemalware · 2
- FBIorganization · 2
- OtterCandymalware · 2
- National Police Agencyorganization · 1
- npmvendor · 1
- DPRKthreat actor · 1
- BfVorganization · 1
- ACSCorganization · 1
- Rust Projectorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.