North Korean Attackers Hit 30,000 Devices and Steal $10.7m
North Korea's WaterPlum infected about 30,000 devices and stole roughly $10.7 million in cryptocurrency.
4
Stories per day · 30 days
9 stories, newest first · one card per story
Stories tagged #contagious-interview
Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme
Japan, US, Australia and Germany attributed WaterPlum's fake-employer scheme to North Korea; 30,000 devices infected and $10.71 million stolen since December 2025.
2
Contagious Interview: 30,000 devices infected by a fake job interview
North Korea-linked WaterPlum infected over 30,000 devices through fake job interviews, stealing about $10.7 million.
2
Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
North Korea's Contagious Interview campaign hit 30,000 devices and stole about $10.71 million in crypto.
3
North Korean WaterPlum Hackers Infect 30,000 PCs via Fake Job Interviews, Steal $10.7M Crypto
North Korean WaterPlum actors posed as recruiters to infect 30,000 developers' PCs and steal $10.7M in cryptocurrency via BeaverTail, InvisibleFerret and other malware.
4
North Korean WaterPlum hackers infected 30,000 devices worldwide
Joint US, Japan, Australia, Germany advisory links North Korean WaterPlum group to 30,000 infected devices and $10.7 million in stolen cryptocurrency.
2
North Korean WaterPlum Hackers Target IT Professionals With Fake Job Interviews to Steal Crypto
North Korean WaterPlum actors used fake job interviews to infect 30,000 devices and steal crypto from 7,000+ wallets, netting roughly $10.71 million.
1
International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data
US, Japanese, German, and Australian agencies warn North Korea's WaterPlum gang poses as recruiters, infecting 30,000+ devices and stealing about $11 million in crypto.
2
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
Researchers discovered WeaselBiscuit, a stripped-down JavaScript stealer delivered via 13 malicious npm packages, harvesting Chrome extension storage with suspected DPRK links.
2