North Korean hacker group steals $10.7 million from over 7,000 crypto wallets via fake job offers

A joint warning from the FBI and the Japanese National Police Agency (NPA) revealed that the North Korean-linked hacker group WaterPlum, also known as Contagious Interview, compromised over 30,000 devices across more than 100 countries between December 2025 and July 2026. The attackers posed as companies in the AI, cryptocurrency, and NFT sectors to lure IT developers with fake job opportunities. By inducing victims to download malicious files during technical interviews or coding tests, the group successfully stole data and at least $10.71 million from over 7,000 cryptocurrency wallets.