#waterplum
waterplum
332 views
6 Discussing
Hot
Latest
Article
State Sponsored Hackers Target Global Crypto WalletsThe scale of the recent WaterPlum operation is genuinely terrifying for anyone holding significant digital assets. Japan's National Police Agency has revealed that this North Korean linked group managed to compromise more than 30,000 devices across a massive range of countries. The most alarming part is the specific targeting of over 7,000 cryptocurrency wallets.
This was not some simple brute force attack on a protocol. Instead these hackers used highly targeted social engineering through fake recruitment campaigns. They are hunting for developers and professionals using the lure of job offers to get targets to download malicious software. Once that door is open the entire wallet and device security can vanish in an instant.
For the broader crypto community this highlights a massive shift in the threat landscape. We often focus on smart contract vulnerabilities or exchange hacks but human error remains the weakest link in the chain. If you are a developer or a wealthy individual your professional interactions are now a primary target for state sponsored actors.
Staying safe requires more than just using a hardware wallet. It requires extreme skepticism during any professional outreach and a deep understanding of how social engineering works. The threat is no longer just coming from script kiddies but from highly organized and well funded nation state groups.
#WaterPlum #CyberSecurity
State Sponsored Hackers Target Global Crypto Wallets
The scale of the recent WaterPlum operation is genuinely terrifying for anyone holding significant digital assets. Japan's National Police Agency has revealed that this North Korean linked group managed to compromise more than 30,000 devices across a massive range of countries. The most alarming part is the specific targeting of over 7,000 cryptocurrency wallets.
This was not some simple brute force attack on a protocol. Instead these hackers used highly targeted social engineering through fake recruitment campaigns. They are hunting for developers and professionals using the lure of job offers to get targets to download malicious software. Once that door is open the entire wallet and device security can vanish in an instant.
For the broader crypto community this highlights a massive shift in the threat landscape. We often focus on smart contract vulnerabilities or exchange hacks but human error remains the weakest link in the chain. If you are a developer or a wealthy individual your professional interactions are now a primary target for state sponsored actors.
Staying safe requires more than just using a hardware wallet. It requires extreme skepticism during any professional outreach and a deep understanding of how social engineering works. The threat is no longer just coming from script kiddies but from highly organized and well funded nation state groups.
#WaterPlum #CyberSecurity
This was not some simple brute force attack on a protocol. Instead these hackers used highly targeted social engineering through fake recruitment campaigns. They are hunting for developers and professionals using the lure of job offers to get targets to download malicious software. Once that door is open the entire wallet and device security can vanish in an instant.
For the broader crypto community this highlights a massive shift in the threat landscape. We often focus on smart contract vulnerabilities or exchange hacks but human error remains the weakest link in the chain. If you are a developer or a wealthy individual your professional interactions are now a primary target for state sponsored actors.
Staying safe requires more than just using a hardware wallet. It requires extreme skepticism during any professional outreach and a deep understanding of how social engineering works. The threat is no longer just coming from script kiddies but from highly organized and well funded nation state groups.
#WaterPlum #CyberSecurity
3
…
🚨 North Korea just turned fake job interviews into a $10.7M crypto heist. 💀
The WaterPlum hacking group being monitored by Japan, the FBI, and allied cyber security agencies is linked to North Korea, and is directly targeting IT engineers through fake job postings.
💻 30,000+ infected devices
🌍 100+ countries & territories
👛 7,000+ crypto wallets have had information stolen
💰 At least ~$10.71M in crypto was moved into wallets controlled by the group.🗓️ Activity was recorded from 12/2025 → 07/2026
Notably, Japanese police also found a “laptop farm” run by a local associate, allowing North Korean IT engineers to operate remotely.
WaterPlum has also previously posed as an engineer applicant to apply to bitFlyer, but it wasn’t hired and did not cause damage to the exchange.
What’s scary isn’t a smart contract vulnerability.
The attack vector here is the people.
Crypto companies are becoming an attractive target because staff have access to private keys, wallet infrastructure, exchange systems, and internal data.
🔥 THE JOB INTERVIEW WAS THE ATTACK VECTOR.
For crypto/Web3 teams, hiring processes now don’t just need to check resumes—candidate verification, device security, and access control must be treated as part of the security stack.
How tightly do you think crypto companies should tighten their hiring process to prevent this kind of attack?
#northkorea #WaterPlum #crypto #Web3
…
🚨 North Korea just turned fake job interviews into a $10.7M crypto heist. 💀
The WaterPlum hacking group being monitored by Japan, the FBI, and allied cyber security agencies is linked to North Korea, and is directly targeting IT engineers through fake job postings.
💻 30,000+ infected devices
🌍 100+ countries & territories
👛 7,000+ crypto wallets have had information stolen
💰 At least ~$10.71M in crypto was moved into wallets controlled by the group.🗓️ Activity was recorded from 12/2025 → 07/2026
Notably, Japanese police also found a “laptop farm” run by a local associate, allowing North Korean IT engineers to operate remotely.
WaterPlum has also previously posed as an engineer applicant to apply to bitFlyer, but it wasn’t hired and did not cause damage to the exchange.
What’s scary isn’t a smart contract vulnerability.
The attack vector here is the people.
Crypto companies are becoming an attractive target because staff have access to private keys, wallet infrastructure, exchange systems, and internal data.
🔥 THE JOB INTERVIEW WAS THE ATTACK VECTOR.
For crypto/Web3 teams, hiring processes now don’t just need to check resumes—candidate verification, device security, and access control must be treated as part of the security stack.
How tightly do you think crypto companies should tighten their hiring process to prevent this kind of attack?
#northkorea #WaterPlum #crypto #Web3
🚨 North Korea just turned fake job interviews into a $10.7M crypto heist. 💀
The WaterPlum hacking group being monitored by Japan, the FBI, and allied cyber security agencies is linked to North Korea, and is directly targeting IT engineers through fake job postings.
💻 30,000+ infected devices
🌍 100+ countries & territories
👛 7,000+ crypto wallets have had information stolen
💰 At least ~$10.71M in crypto was moved into wallets controlled by the group.🗓️ Activity was recorded from 12/2025 → 07/2026
Notably, Japanese police also found a “laptop farm” run by a local associate, allowing North Korean IT engineers to operate remotely.
WaterPlum has also previously posed as an engineer applicant to apply to bitFlyer, but it wasn’t hired and did not cause damage to the exchange.
What’s scary isn’t a smart contract vulnerability.
The attack vector here is the people.
Crypto companies are becoming an attractive target because staff have access to private keys, wallet infrastructure, exchange systems, and internal data.
🔥 THE JOB INTERVIEW WAS THE ATTACK VECTOR.
For crypto/Web3 teams, hiring processes now don’t just need to check resumes—candidate verification, device security, and access control must be treated as part of the security stack.
How tightly do you think crypto companies should tighten their hiring process to prevent this kind of attack?
#northkorea #WaterPlum #crypto #Web3
AngelOfCrypto_-:
nice
1
3
468
North Korea is accused of using fake job interviews to steal $10.7 million in crypto
A cyberattack campaign linked to North Korea has been exposed after successfully “stealing” about $10.71 million from more than 7,000 cryptocurrency wallets. This general alert has just been issued simultaneously by seven security and intelligence agencies from Japan, the United States, Australia, and Germany.
Campaign name: Called WaterPlum by Japan, while cybersecurity circles are familiar with the name Contagious Interview.
Scale: From December 2025 to July 2026, the group infected roughly 30,000 devices in over 100 countries.
Targets: Programmers, engineers, and personnel working in the crypto, blockchain, and Web3 sectors.
Trick: Posing as an AI, NFT, or crypto company to recruit. The group invites candidates to technical interviews, then lures them into downloading files to complete a test assignment or “fix” a video call. In reality, these files contain malware such as BeaverTail, InvisibleFerret, and StoatWaffle.
Top-tier tech: Uses AI for face-swapping (deepfakes) during interviews and employs “ghost” computer setups (laptop farms) to conceal the true location. Japan has just dismantled such a laptop farm for the first time on its own territory.
Behind the organization: The FBI and Japanese police assess that WaterPlum and these remote IT labor networks all belong to the same North Korean defense agency.
This article is for news updates only. If you unexpectedly receive an offer for a million-dollar salary job interview from an unknown blockchain company and are asked to download an .exe file to “test the camera,” congratulations—you’re preparing to fund that country’s space program!
#CryptoScam #CyberSecurity #ContagiousInterview #WaterPlum #Web3Security
North Korea is accused of using fake job interviews to steal $10.7 million in crypto
A cyberattack campaign linked to North Korea has been exposed after successfully “stealing” about $10.71 million from more than 7,000 cryptocurrency wallets. This general alert has just been issued simultaneously by seven security and intelligence agencies from Japan, the United States, Australia, and Germany.
Campaign name: Called WaterPlum by Japan, while cybersecurity circles are familiar with the name Contagious Interview.
Scale: From December 2025 to July 2026, the group infected roughly 30,000 devices in over 100 countries.
Targets: Programmers, engineers, and personnel working in the crypto, blockchain, and Web3 sectors.
Trick: Posing as an AI, NFT, or crypto company to recruit. The group invites candidates to technical interviews, then lures them into downloading files to complete a test assignment or “fix” a video call. In reality, these files contain malware such as BeaverTail, InvisibleFerret, and StoatWaffle.
Top-tier tech: Uses AI for face-swapping (deepfakes) during interviews and employs “ghost” computer setups (laptop farms) to conceal the true location. Japan has just dismantled such a laptop farm for the first time on its own territory.
Behind the organization: The FBI and Japanese police assess that WaterPlum and these remote IT labor networks all belong to the same North Korean defense agency.
This article is for news updates only. If you unexpectedly receive an offer for a million-dollar salary job interview from an unknown blockchain company and are asked to download an .exe file to “test the camera,” congratulations—you’re preparing to fund that country’s space program!
#CryptoScam #CyberSecurity #ContagiousInterview #WaterPlum #Web3Security
A cyberattack campaign linked to North Korea has been exposed after successfully “stealing” about $10.71 million from more than 7,000 cryptocurrency wallets. This general alert has just been issued simultaneously by seven security and intelligence agencies from Japan, the United States, Australia, and Germany.
Campaign name: Called WaterPlum by Japan, while cybersecurity circles are familiar with the name Contagious Interview.
Scale: From December 2025 to July 2026, the group infected roughly 30,000 devices in over 100 countries.
Targets: Programmers, engineers, and personnel working in the crypto, blockchain, and Web3 sectors.
Trick: Posing as an AI, NFT, or crypto company to recruit. The group invites candidates to technical interviews, then lures them into downloading files to complete a test assignment or “fix” a video call. In reality, these files contain malware such as BeaverTail, InvisibleFerret, and StoatWaffle.
Top-tier tech: Uses AI for face-swapping (deepfakes) during interviews and employs “ghost” computer setups (laptop farms) to conceal the true location. Japan has just dismantled such a laptop farm for the first time on its own territory.
Behind the organization: The FBI and Japanese police assess that WaterPlum and these remote IT labor networks all belong to the same North Korean defense agency.
This article is for news updates only. If you unexpectedly receive an offer for a million-dollar salary job interview from an unknown blockchain company and are asked to download an .exe file to “test the camera,” congratulations—you’re preparing to fund that country’s space program!
#CryptoScam #CyberSecurity #ContagiousInterview #WaterPlum #Web3Security
35
North Korea scam tricks 30K devices, steals $10.7M in cryptocurrency
- A North Korea-linked network called WaterPlum launched a scam campaign using fake job offers at crypto, AI, and NFT companies.
- The targets are software developers, leading to the infection of at least 30,000 devices across more than 100 countries.
- The campaign aims to steal information and cryptocurrency assets, with total losses reaching up to $10.7M.
- The incident highlights the growing cybersecurity risks within the tech and crypto community.
#BinanceSquare #CryptoNews #NorthKorea #WaterPlum #AI NFT Security BTC ETH
$btc $eth
vlikevn Titanbot
Source: CoinTelegraph
North Korea scam tricks 30K devices, steals $10.7M in cryptocurrency
- A North Korea-linked network called WaterPlum launched a scam campaign using fake job offers at crypto, AI, and NFT companies.
- The targets are software developers, leading to the infection of at least 30,000 devices across more than 100 countries.
- The campaign aims to steal information and cryptocurrency assets, with total losses reaching up to $10.7M.
- The incident highlights the growing cybersecurity risks within the tech and crypto community.
#BinanceSquare #CryptoNews #NorthKorea #WaterPlum #AI NFT Security BTC ETH
$btc $eth
vlikevn Titanbot
Source: CoinTelegraph
- A North Korea-linked network called WaterPlum launched a scam campaign using fake job offers at crypto, AI, and NFT companies.
- The targets are software developers, leading to the infection of at least 30,000 devices across more than 100 countries.
- The campaign aims to steal information and cryptocurrency assets, with total losses reaching up to $10.7M.
- The incident highlights the growing cybersecurity risks within the tech and crypto community.
#BinanceSquare #CryptoNews #NorthKorea #WaterPlum #AI NFT Security BTC ETH
$btc $eth
vlikevn Titanbot
Source: CoinTelegraph
209
Log in to explore more content
Join global crypto users on Binance Square
⚡️ Get latest and useful information about crypto.
💬 Trusted by the world’s largest crypto exchange.
👍 Discover real insights from verified creators.
Email / Phone number
Trending Topics
1
#BitcoinSpotETFsNetInflow$191M
978 views
81 Discussing
2
#CFTCUpdatesGuidanceOnTokenizedAssets
12,620 views
584 Discussing
3
#BitgetSays$352MAffectedInHack
2,933 views
42 Discussing
4
#BinanceWillListHyperliquid(HYPE)
199,380 views
3,180 Discussing
5
#BrazilOrdersReportingOf$10KSelfCustodyTransfers
1,196 views
42 Discussing
6
#FedProposesRulesForBankIssuedStablecoins
12,808 views
420 Discussing
7
#OndoFinanceSoughtSaleAfterFoundersDeath
8,510 views
273 Discussing
8
#FedOctoberRateHikeOddsRiseTo69.7%
79,287 views
1,388 Discussing
9
#BitcoinFallsBelow$83,000
5,175 views
19 Discussing
10
#BitcoinFallsToAround$84,600ThisWeek
0 views
0 Discussing