North Korean IT worker impersonator attempts to join bitFlyer

The Japanese National Police Agency announced that a person suspected of being a North Korean IT worker attempted to apply for an engineering position at bitFlyer in May 2025 using a fake identity. The company identified suspicious behavior during the interview process and prevented any hiring or security breach. The applicant used VPN services and IP addresses linked to the cyberattack group WaterPlum. The investigation was conducted in collaboration with international agencies including the FBI, and authorities noted that the group has been involved in widespread malware infections and crypto wallet theft.