International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data
ID: 237c16fb-103e-58f9-a514-657c7ea20ddf
STIX ID: report--237c16fb-103e-58f9-a514-657c7ea20ddf
Feed Name: CyberScoop
North Korean-linked APT 'WaterPlum' (aka Contagious Interview) is conducting a global recruiting-style campaign targeting software developers and IT professionals by posing as employers (often AI, crypto, or NFT firms). The group has infected more than 30,000 devices across 100+ countries, exfiltrated sensitive data, and transferred nearly $11 million in cryptocurrency; international law enforcement and allied agencies released an alert detailing TTPs and some enforcement successes, including dismantling a laptop farm.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
