North Korean hackers stole $10.7M via fake job interviews

The WaterPlum group, also known as Contagious Interview, infected over 30,000 devices in more than 100 countries between December 2025 and July 2026 by posing as recruiters for AI and crypto firms. A joint advisory from the FBI, Australia, Japan and Germany says about $10.71 million in cryptocurrency was stolen from over 7,000 wallets.

• Over 30,000 devices infected across more than 100 countries
• About $10.71 million in crypto stolen from 7,000+ wallets
• Roughly 1.7 billion yen moved back to North Korea
• Group tied to North Korea's 313 General Bureau of the Munitions Industry Department