TREE NEWS update: A seven-agency advisory links the WaterPlum hacking crew and Pyongyang’s remote IT worker scheme to the same North Korean bureau, which drained about $11 million from roughly 7,000 crypto wallets through fake job interviews. The joint notice attributes the campaign to state-directed operators posing as recruiters to lure crypto employees into malware-laced hiring processes.
North Korea Hackers Stole $11M From 7,000 Crypto Wallets via Fake Job Interviews
The joint advisory matters less for the $11 million than for the attribution: it formally links a criminal hacking crew and Pyongyang's remote IT worker scheme to a single state bureau, folding two previously separate threat streams into one. That reframes fake job interviews as a state-directed intrusion channel rather than isolated social engineering, implicating crypto firms' hiring pipelines as an attack surface. Whether other governments issue matching attribution, and whether exchanges tighten recruitment vetting, is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.