North Korea’s job interview scam runs both ways
North Korea's Contagious Interview group targets Rust developers with fake job scams to steal credentials and crypto, infecting 30,000+ devices.
North Korean state-sponsored threat group Contagious Interview (aka WaterPlum) is targeting Rust developers and maintainers with fake job or collaboration offers. Attackers use malicious coding assignments or video calls to trick victims into installing malware or revealing credentials. Stolen credentials are used for cryptocurrency theft, extortion, and to support North Korean IT worker schemes. International authorities report the group has infected over 30,000 devices across more than 100 countries and stolen funds from over 7,000 cryptocurrency wallets.