FBI Warns of North Korean 'WaterPlum' Campaign Infecting Devices Across 100 Countries

A multinational law enforcement advisory details "WaterPlum," a North Korean cyber operation that posed as AI and blockchain recruiters to trick primarily IT professionals into downloading malware; the campaign infected over 30,000 devices across 100 countries between December 2025 and July 2026, stole more than $10.5M and compromised ~7,000 crypto wallets, employed multiple malware families (infostealers, backdoors, persistence tools), and also used stolen identities to gain jobs at technology firms for deeper access.