North Korean Hackers Infect Over 30,000 Devices, Steal Data From 7,000 Crypto Wallets
Japan’s National Police Agency and the FBI reported that North Korea-linked WaterPlum infected over 30,000 devices across more than 100 countries and regions from December 2025 to July 2026, stealing data from over 7,000 crypto wallets. Wallets under its control received at least $10.71 million in crypto assets.
The group impersonated recruiters from crypto, AI and NFT firms to trick job seekers into running malware. Japanese police also dismantled their first identified domestic laptop farm supporting North Korean IT workers. A suspected North Korean IT worker applied for an engineering role at crypto exchange bitFlyer in May 2025 but was not hired.
$ETH $BTC
Japan’s National Police Agency and the FBI reported that North Korea-linked WaterPlum infected over 30,000 devices across more than 100 countries and regions from December 2025 to July 2026, stealing data from over 7,000 crypto wallets. Wallets under its control received at least $10.71 million in crypto assets.
The group impersonated recruiters from crypto, AI and NFT firms to trick job seekers into running malware. Japanese police also dismantled their first identified domestic laptop farm supporting North Korean IT workers. A suspected North Korean IT worker applied for an engineering role at crypto exchange bitFlyer in May 2025 but was not hired.
$ETH $BTC
