CERT24North Korean WaterPlum hackers infected 30,000 devices worldwideLoading data…
CERT24Threat Observatory
Period

North Korean WaterPlum hackers infected 30,000 devices worldwide

A joint law enforcement advisory says that WaterPlum infected at least 30,000 devices in more than 100 countries from December 2025 through July 2026 and transferred cryptocurrency worth 1.7 billion Japanese yen, or $10.71 million, to North Korea. The attacks involved fake job interviews, coding tests, and malicious npm packages.

← Back to intelligence

North Korean WaterPlum hackers infected 30,000 devices worldwide

A joint law enforcement advisory says that WaterPlum infected at least 30,000 devices in more than 100 countries from December 2025 through July 2026 and transferred cryptocurrency worth 1.7 billion Japanese yen, or $10.71 million, to North Korea. The attacks involved fake job interviews, coding tests, and malicious npm packages.