Stopping IT Worker Scams Requires Revamped HR Process

A sustained DPRK-linked campaign known as WaterPlum (aka Contagious Interview) uses fake remote IT-worker recruitment to infiltrate organizations: attackers obtain company laptops, install surveillance/malware, recruit via large-scale AI-assisted applications, and exfiltrate credentials and cryptocurrency. Nisos ran an operation exposing a laptop farm and dozens of operators and facilitators; government advisories report ~30,000 infected devices across 100+ countries and theft or credential compromise from thousands of wallets, while the report emphasizes HR and recruitment controls to detect such schemes.