A North Korea-linked hacking group used fake job offers to target IT workers and steal cryptocurrency, Japan’s NPA said Friday.
breaking
North Korea-Linked Hackers Used Fake Jobs to Steal Crypto From IT Workers
North Korea-linked hackers reportedly used fake job opportunities to target IT workers and steal cryptocurrency. The campaign relied on employment-themed social engineering to gain access to victims or their digital assets.
CryptoRank
Publisher
Sep 18, 2026 at 10:33 PM UTC · Updated vor 5 Tagen · 1 Min. Lesezeit
Key Signal
30,000+ devices infected globally
Last Updated
vor 5 Tagen
Übersetzung…
The group, known as WaterPlum, infected more than 30,000 devices across over 100 countries from December 2025 through July 2026. Investigators also found information linked to more than 7,000 crypto wallets.
At least ¥1.7 billion in cryptocurrency later moved to wallets controlled by the group, according to the NPA.
Fake Jobs Target IT Workers
WaterPlum posed as recruiters for companies working in AI, crypto and NFTs. Attackers contacted developers through social media, job websites and freelance platforms before sending technical interviews or coding assignments.
Some applicants received development files or projects and were asked to run code while completing the tasks. The NPA said attackers embedded malicious code in some files, al…
Read The Full Article North Korea-Linked Hackers Used Fake Jobs to Steal Crypto From IT Workers On Coin Edition.
Schnelle Antworten
How did the hackers reportedly target IT workers?
They reportedly used fake job opportunities as a lure. The excerpt describes the tactic as a way to steal cryptocurrency from IT workers.
Who is linked to the alleged crypto theft campaign?
The alleged hackers are described as North Korea-linked. The excerpt does not identify a specific group or individuals.
What was reportedly stolen in the campaign?
The campaign reportedly stole cryptocurrency from IT workers. No details about the amount or specific assets are provided.
Sourced by
Originally reported by CryptoRank
NewsLayer coverage based on externally reported material.
The Daily Brief
The onchain economy, before your day starts.
Curated markets, onchain insights, and key headlines — delivered every weekday morning.
Weekdays · Free · ~5 minute read
0
Applause
Was this article helpful?
Article Intelligence
Topics
Related Coverage
View all related
Sponsored
Ad
NewsLayerLearn more
NewsLayer Premium
Unlock deeper intelligence.
Ad-free reading, exclusive research, and real-time onchain insights.
Go Premium
