North Korea's WaterPlum infected 30,000 devices, stole data from 7,000 crypto wallets
- —More than 30,000 devices infected across 100+ countries and regions
- —Data from more than 7,000 crypto wallets stolen
- —At least $10.71 million transferred to WaterPlum's wallets
- —The campaign ran from December 2025 to July 2026 via fake job postings
Why it matters: The fake-recruiting scheme remains a working attack channel against crypto company employees, raising the risk of key and fund leaks.
Source: Koin Bülteni