North Korea's fake job interviews infected 30,000 devices
WaterPlum recruiters used bogus coding tests to backdoor jobseekers and raid more than 7,000 crypto wallets
North Korean cybercriminals have infected over 30,000 devices through fake job interviews, stealing more than $10 million, according to an international advisory. Law enforcement and cybersecurity agencies from five countries issued a warning about the WaterPlum campaign, which targets web designers, engineers, and cryptocurrency specialists.
During the recruitment process, victims are prompted to download files that install malware, giving attackers persistent access to credentials and sensitive data. The compromised machines may later provide access to corporate systems when the jobseekers secure legitimate employment, enabling the theft of intellectual property, credentials, and identity documents.
The scheme supports North Korea's regime, with stolen funds ultimately benefiting Pyongyang. The advisory advises organizations to investigate any suspicions of fraudulent North Korean IT workers thoroughly.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
Also reported by 1 other outlet
- North Korea's fake job interviews infected 30,000 devices theregister.com
