🚨 30,000 computers were breached in a single fake job interview campaign, and the private keys of more than 7,000 encrypted wallets were stolen
Group: 点击进入玖玖的粉丝群
On the same day, regulators in Shikoku issued a joint announcement. Japan’s National Police Agency, the U.S. FBI, and authorities from Australia and Germany also named North Korea–linked hacker groups WaterPlum—another name is Contagious Interview⚠️
Let’s start with the first layer. The timeline runs from December 2025 to July 2026. At least 30,000 devices were affected, spanning more than 100 countries and regions. What they want isn’t a platform vulnerability—it’s people.
Now the second layer: the losses are very specific. Funds and account credentials were stolen from more than 7,000 encrypted wallets. In total, about ¥1.7 billion (approximately US$10.71 million) worth of crypto assets was transferred back to North Korea to keep the projects funded.
Third layer: the method is not high-tech at all. They impersonate AI, crypto, and NFT companies to hire people—using job boards for interviews—then have targets download the project, install dependencies, and run code during so-called technical tests🔧. The malicious code is hidden in npm packages and Visual Studio Code project files, with names like BeaverTail and InvisibleFerret.
What’s interesting is that some hackers keep an AI face-swapping app running during interviews. The moment they’re questioned, they turn off the camera and say the network is bad. The script sounds crude, but what it’s after is the job you want.
Of course, some people say, just don’t install dependencies from unknown sources and you’ll be fine. That’s true—but in reality, developers run scripts in unfamiliar codebases every day. Just staying vigilant can’t fully cover every risk. What’s really worth targeting isn’t one malicious package—it’s the entire pipeline that uses job seekers as the entry point.
One side says this is state-level theft; the other says personal caution is enough to prevent it. Which side are you on?👀
Click the avatar to watch the live stream + join the Jiujiu chat group to get daily strategies🚀
#加密货币 #网络安全 #比特币 #Web3
Group: 点击进入玖玖的粉丝群
On the same day, regulators in Shikoku issued a joint announcement. Japan’s National Police Agency, the U.S. FBI, and authorities from Australia and Germany also named North Korea–linked hacker groups WaterPlum—another name is Contagious Interview⚠️
Let’s start with the first layer. The timeline runs from December 2025 to July 2026. At least 30,000 devices were affected, spanning more than 100 countries and regions. What they want isn’t a platform vulnerability—it’s people.
Now the second layer: the losses are very specific. Funds and account credentials were stolen from more than 7,000 encrypted wallets. In total, about ¥1.7 billion (approximately US$10.71 million) worth of crypto assets was transferred back to North Korea to keep the projects funded.
Third layer: the method is not high-tech at all. They impersonate AI, crypto, and NFT companies to hire people—using job boards for interviews—then have targets download the project, install dependencies, and run code during so-called technical tests🔧. The malicious code is hidden in npm packages and Visual Studio Code project files, with names like BeaverTail and InvisibleFerret.
What’s interesting is that some hackers keep an AI face-swapping app running during interviews. The moment they’re questioned, they turn off the camera and say the network is bad. The script sounds crude, but what it’s after is the job you want.
Of course, some people say, just don’t install dependencies from unknown sources and you’ll be fine. That’s true—but in reality, developers run scripts in unfamiliar codebases every day. Just staying vigilant can’t fully cover every risk. What’s really worth targeting isn’t one malicious package—it’s the entire pipeline that uses job seekers as the entry point.
One side says this is state-level theft; the other says personal caution is enough to prevent it. Which side are you on?👀
Click the avatar to watch the live stream + join the Jiujiu chat group to get daily strategies🚀
#加密货币 #网络安全 #比特币 #Web3
