North Korean hacker group WaterPlum steals $10.7 million in crypto via fake recruitment

The North Korean hacker group WaterPlum has been posing as recruiters for crypto, AI, and NFT firms to target software developers and IT professionals. By distributing malware disguised as programming tasks or video conferencing fixes, the group has infected at least 30,000 devices across more than 100 countries. Between December 2025 and July 2026, the group compromised over 7,000 crypto wallets, stealing at least $10.7 million.