logo

International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data

ID: 237c16fb-103e-58f9-a514-657c7ea20ddf

STIX ID: report--237c16fb-103e-58f9-a514-657c7ea20ddf

Feed Name: CyberScoop

Threat Score
88/100

Date Published: 2026-09-18

Date Updated: 2026-09-19

Author: Tim Starks

...
...

North Korean-linked APT 'WaterPlum' (aka Contagious Interview) is conducting a global recruiting-style campaign targeting software developers and IT professionals by posing as employers (often AI, crypto, or NFT firms). The group has infected more than 30,000 devices across 100+ countries, exfiltrated sensitive data, and transferred nearly $11 million in cryptocurrency; international law enforcement and allied agencies released an alert detailing TTPs and some enforcement successes, including dismantling a laptop farm.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.