Security· ★★★★· bearish·

Australia Warns North Korean Hackers Stole $10.7M via Fake Job Scams

  • —WaterPlum infected at least 30,000 devices in over 100 countries from December 2025 to July 2026
  • —Funds and credentials were taken from more than 7,000 crypto wallets, totaling $10.71 million
  • —Members posed as AI, crypto and NFT recruiters and sent malware-laced npm packages
  • —Japanese authorities dismantled the country's first laptop farm used by North Korean IT workers
Why it matters: Fake-interview campaigns remain a working channel for stealing seed phrases from developers, so untrusted code should only run in a sandbox.
Source: Crypto News Australia
More on this
Security · Sep 20
North Korean hackers stole funds from 7,000 crypto wallets via fake job offers
 Security · Sep 18
Seven agencies from Japan, US, Australia and Germany expose $10.7 million theft by North Korea's WaterPlum
 Security · 13:38
Chainalysis: North Korea-linked hackers stole at least $6.75 billion in crypto