North Korean Hacker Group WaterPlum Breaches 30,000 Devices, Stealing $10.71 Million

The North Korean-linked hacker group WaterPlum has attacked global IT developers from December 2025 to July 2026 by disguising itself as companies in the AI, cryptocurrency, or NFT sectors offering fake job positions. The attackers contacted job seekers on social media and recruitment platforms, luring them into downloading malicious files under the pretext of technical interviews or programming tests, successfully infecting over 30,000 devices across more than 100 countries and regions. The attackers stole data from over 7,000 cryptocurrency wallets, with at least $10.71 million in related funds flowing into wallets under their control.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.