CYBERSECURITYTRACKER
Permanent story citation

North Korean hackers infect thousands of devices across 100 countries as part of ‘WaterPlum’ campaign

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7818

As cited

Copy frozen at (site build).

threat intel

North Korean hackers infect thousands of devices across 100 countries as part of ‘WaterPlum’ campaign

The FBI, Defense Department, and international law enforcement agencies from Japan, Australia, and Germany issued an advisory about WaterPlum, a group of North Korean cyber actors. The group conducts targeted campaigns against job applicants by impersonating artificial intelligence (AI) and blockchain companies to steal cryptocurrency. The campaign has infected thousands of devices across more than 100 countries.

Why it matters: Organizations and individuals recruiting for AI or blockchain roles face credential theft and device compromise from a state-sponsored threat; practitioners should brief hiring teams and monitor for malicious job postings and employment-related phishing linked to WaterPlum.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary