US and international authorities report that North Korean hacking group WaterPlum infected about 30,000 computers worldwide, siphoning roughly $10.7 million in cryptocurrency from more than 7,000 digital wallets between late 2025 and mid-2026. According to a joint advisory from the FBI and partners in Japan, Australia and Germany, WaterPlum used fake IT job listings on social media and recruiting platforms, luring applicants into running malware disguised as coding tests and troubleshooting tools. Officials say the operation supports North Korea’s 313 General Bureau and warn it threatens individuals and companies, particularly in Germany and the EU, while investigators continue pursuing US facilitators operating laptop farms and financial accounts.
This update represents a notable development in the Crypto sector. Organizations and founders tracking this space should evaluate potential strategic and technical implications on their operations.