NewsLayer

Install NewsLayer

Get the app experience — one tap from your home screen, instant loads and breaking-news alerts.

NewsLayer.com
LatestDaily BriefMarkets
NewsLayer PulseLIVE₿BTC$81,057+5.92%ΞETH$2,616+6.94%◎SOL$113.12+11.65%✕XRP$1.41+8.26%ÐDOGE$0.0879+7.47%₳ADA$0.2271+10.99%Total Cap$2.89T+5.49%24H Vol$197.8BLayer Index65 Greed
BreakingNorth Korea-Linked Hackers Used Fake Jobs to Steal Crypto From IT Workers2 saat önce
Markets
HomeCrypto

Crypto

breaking

North Korea-Linked Hackers Used Fake Jobs to Steal Crypto From IT Workers

North Korea-linked hackers reportedly used fake job opportunities to target IT workers and steal cryptocurrency. The campaign relied on employment-themed social engineering to gain access to victims or their digital assets.

CryptoRank

Publisher

Sep 18, 2026 at 10:33 PM UTC · Updated 5 dakika önce · 1 dk okuma

North Korea-Linked Hackers Used Fake Jobs to Steal Crypto From IT Workers
Image via CryptoRank

Key Signal

30,000+ devices infected globally

Last Updated

5 dakika önce

Çevriliyor…

A North Korea-linked hacking group used fake job offers to target IT workers and steal cryptocurrency, Japan’s NPA said Friday.

The group, known as WaterPlum, infected more than 30,000 devices across over 100 countries from December 2025 through July 2026. Investigators also found information linked to more than 7,000 crypto wallets.

At least ¥1.7 billion in cryptocurrency later moved to wallets controlled by the group, according to the NPA.

Fake Jobs Target IT Workers

WaterPlum posed as recruiters for companies working in AI, crypto and NFTs. Attackers contacted developers through social media, job websites and freelance platforms before sending technical interviews or coding assignments.

Some applicants received development files or projects and were asked to run code while completing the tasks. The NPA said attackers embedded malicious code in some files, al…

Read The Full Article North Korea-Linked Hackers Used Fake Jobs to Steal Crypto From IT Workers On Coin Edition.

Why this matters

The campaign’s reach across more than 100 countries and its use of fake technical hiring processes show how developer recruitment channels can become a scalable route for malware and crypto theft. The movement of at least ¥1.7 billion to attacker-controlled wallets suggests affected workers and organizations could face continuing credential, wallet and software-supply-chain risks.

Hızlı Yanıtlar

How did the hackers reportedly target IT workers?

They reportedly used fake job opportunities as a lure. The excerpt describes the tactic as a way to steal cryptocurrency from IT workers.

Who is linked to the alleged crypto theft campaign?

The alleged hackers are described as North Korea-linked. The excerpt does not identify a specific group or individuals.

What was reportedly stolen in the campaign?

The campaign reportedly stole cryptocurrency from IT workers. No details about the amount or specific assets are provided.

#crypto

Sourced by

Originally reported by CryptoRank

NewsLayer coverage based on externally reported material.

The Daily Brief

The onchain economy, before your day starts.

Curated markets, onchain insights, and key headlines — delivered every weekday morning.

Weekdays · Free · ~5 minute read

0

Applause

Was this article helpful?

Article Intelligence

Topics

crypto

Sponsored

Ad
House — Advertise on NewsLayer
NewsLayerLearn more

NewsLayer Premium

Unlock deeper intelligence.

Ad-free reading, exclusive research, and real-time onchain insights.

Go Premium

Previous Story

Grayscale Zcash ETF Sets 3-for-1 Split as ZEC Surges 25%

Next Story

CFTC Sends Crypto Rules To White House After Bill Stalls

Keep Reading

İlgili Haberler

Kriptonun Bir Sonraki Altyapı Ticareti Spekülasyon Değil, GüvenlikALTYAPI SIFIRLAMA Premium

Kriptonun Bir Sonraki Altyapı Ticareti Spekülasyon Değil, Güvenlik

Haftanın manşetleri kuantum bilişim, piyasa yapısı ve cüzdan kötü amaçlı yazılımları arasında dağılmış görünse de tek bir tutarlı değişime işaret ediyor: kripto, kritik bir finansal altyapı olarak olgunlaşmaya zorlanıyor. Buradan sonra kazananların en gürültülü token anlatıları olması pek olası değil; onlar plat

20 dakika önce

5 dk okuma
NewsLayer.com

The front page of the onchain economy. Crypto, Web3 and regulation intelligence — live prices, original research and policy tracking in one layer.

Follow on XTelegram

News

  • Latest News
  • The Daily Brief
  • Crypto
  • DeFi
  • Policy
  • Web3
  • Blockchain
  • Explainers

Markets

  • Market News
  • Layer Index
  • Live Charts
  • DeFi Protocols
  • Regulation Tracker
  • Regulation Radar

Company

  • About NewsLayer
  • Advertise
  • PR Publication
  • Become an Author
  • Our Authors
  • Create Account
  • Sign in

Resources

  • Research
  • NewsLayer Originals
  • My Feed
  • Search
  • AI Sector
  • Quantum Sector

NewsLayer Premium

Read the full layer.

Unlock premium intelligence, original research and an ad-free reading experience.

  • Premium Intelligence briefings
  • Ad-free reading experience
  • Members-only research & data
Go Premium

© 2026 NewsLayer.com — The front page of the onchain economy

Privacy Policy·Terms of Service
NewsLayer

Get the signal, not the noise.

Markets, regulation and onchain intelligence in a 5-minute morning read — plus breaking alerts and Layer Index flips as they happen.

The Daily Brief

Breaking alerts

Index flips

Free · No spam · Unsubscribe anytime