Crypto Scam: North Korean Hackers Target 7,000 Wallets

Key Insights:

• In today’s crypto scam news, North Korea-linked WaterPlum infected more than 30,000 devices.
• The campaign stole data from more than 7,000 crypto wallets.
• Controlled wallets received at least $10.71 million in crypto.

North Korea-linked hackers infected more than 30,000 devices across over 100 countries and regions between December 2025 and July 2026 in the latest scam news. Japan’s National Police Agency said WaterPlum stole information linked to more than 7,000 crypto wallets.

Authorities also found about $10.71 million transferred to wallets controlled by the group. The campaign combined crypto hacks with fake recruitment activity targeting technology workers.

The investigation involved Japan’s National Police Agency, National Cyber Office, FBI, DC3, ASD, ACSC, BND and BfV. Authorities also examined North Korean IT workers involved in overseas employment and foreign-currency earning activity.

Crypto Hacks Use Fake Recruitment Campaigns

WaterPlum approached software developers, engineers and Web3 workers through social media, recruitment websites and freelance platforms. The hackers impersonated legitimate AI, crypto, NFT and recruitment companies while offering employment opportunities.