← Back to Feed
North Korean hackers infect thousands of devices across 100 countries as part of ‘WaterPlum’ campaign
September 18, 2026 · The Record · Severity: MEDIUM
The FBI and Defense Department partnered with Japan’s National Police Agency and law enforcement agencies in Australia and Germany on a new advisory about “WaterPlum” — a group of cyber actors allegedly stealing cryptocurrency from job applicants by posing as AI or blockchain companies.
Key Takeaways
- North Korean hackers are infecting thousands of devices across 100 countries through the WaterPlum campaign, posing as AI or blockchain companies to lure cryptocurrency job applicants with fake employment opportunities.
- The FBI partnered with law enforcement in Japan, Australia, and Germany on a joint advisory detailing how WaterPlum actors steal cryptocurrency by tricking job seekers into downloading malicious software disguised as legitimate employment tools.