The North Korean hacking group WaterPlum, also known as Contagious Interview, infected at least 30,000 devices in over 100 countries, stealing cryptocurrency worth about $10.7 million and routing the funds to Pyongyang. A joint advisory from agencies in Japan, the United States, Australia, and Germany says WaterPlum posed as tech recruiters on job platforms, tricking software and crypto professionals into downloading malware during fake interviews and coding assignments. The tools enabled extensive credential theft and potential corporate network espionage, linking WaterPlum to North Korea’s fraudulent IT worker scheme. Authorities warn organizations to harden hiring workflows as they continue investigations and disruption efforts.
This update represents a notable development in the Board sector. Organizations and founders tracking this space should evaluate potential strategic and technical implications on their operations.