Security· ★★★★· bearish·

Seven agencies from Japan, US, Australia and Germany expose $10.7 million theft by North Korea's WaterPlum

  • More than 30,000 devices infected in over 100 countries, including Japan and the US
  • $10.71 million (about 1.7 billion yen) in crypto stolen from 7,000+ wallets
  • The hackers use malicious NPM packages and the BeaverTail, InvisibleFerret and OtterCookie malware
  • In Japan, a "laptop farm" run by accomplices was uncovered for the first time, with several hundred million yen moved abroad
Why it matters: Attacks on developers via fake job offers threaten keys and wallets; exchanges and IT companies should tighten code and candidate screening.
Source: CoinPost