TREE NEWS update: A joint advisory from the FBI, Japan’s National Police Agency and other agencies says North Korea-linked group WaterPlum, also known as Contagious Interview, used fake job offers at AI, crypto and NFT companies to infect more than 30,000 devices across over 100 countries between December 2025 and July 2026. The attackers contacted job seekers on social media and recruiting platforms, luring them into downloading malicious files via technical interviews or coding tests, and stole data from more than 7,000 crypto wallets. At least $10.71 million flowed into wallets controlled by the attackers.
North Korea-Linked Hackers Stole $10.7M From 7,000 Crypto Wallets
This advisory matters less for the sum stolen than for the vector: recruitment pipelines, not smart contracts, are the exposure. Developers and job seekers at AI, crypto and NFT firms are the directly affected group, and the cross-border, multi-agency attribution signals that this campaign is being treated as sustained state activity rather than a one-off. The open question is whether hiring-related social engineering keeps outpacing wallet-level security spending, since a single compromised workstation can bypass on-chain defenses entirely.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.