International cybersecurity agencies report that a North Korean group known as WaterPlum used fake tech job offers and coding tests to infect over 30,000 devices and drain more than $10 million from cryptocurrency wallets. WaterPlum targets web developers, software engineers, and crypto or Web3 workers by posing as recruiters, sending malware-laced test files. Once opened, these install remote-access tools that harvest logins, keystrokes, wallet credentials, identity documents, and proprietary data. Authorities warn that compromised personal machines can expose employers to theft, espionage, or extortion, and that stolen IDs may support broader North Korean IT schemes. Companies are urged to scrutinize applicants and conduct forensic checks if fraud is suspected.
This update represents a notable development in the Ai sector. Organizations and founders tracking this space should evaluate potential strategic and technical implications on their operations.