← News
🔥 Trending event · 5 sources

North Korean-linked group infected 30,000 devices in crypto theft campaign

First reported September 18, 2026 by Crypto.news · covered by 5 sources

In short

The North Korean-linked group WaterPlum compromised at least 30,000 devices across more than 100 countries using fake job offers targeting developers and IT professionals. The campaign involved stealing information from more than 7,000 cryptocurrency wallets and transferring over $10.7 million in cryptocurrency to North Korea. The activity was reported from December 2025 through July 2026.

North KoreaFederal Bureau of InvestigationJapan

Written by our news service from the 5 sources below, updated September 23, 2026.

Timeline
  1. Sep 18, 14:38 UTC · Crypto.news
    North Korean hackers stole 7,000 crypto wallet records, Japan says ↗
  2. Sep 19, 14:05 UTC · BleepingComputer
    North Korean WaterPlum hackers infected 30,000 devices worldwide ↗
  3. Sep 21, 01:42 UTC · Cointelegraph
    North Korean fake recruiters infect 30K devices, steal $10.7M in crypto ↗
  4. Sep 21, 09:15 UTC · The Daily Hodl
    North Korean Hackers Infect 30,000 PCs, Steal $10,700,000 in Crypto Through Fake IT Jobs: FBI ↗
  5. Sep 23, 12:15 UTC · Decrypt
    North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets ↗
All coverage
North Korean hackers stole 7,000 crypto wallet records, Japan says

North Korean hackers stole 7,000 crypto wallet records, Japan says

North Korea linked hacking group WaterPlum has compromised more than 30,000 devices across over 100 countries and regions, stealing information from more than 7,000 cryptocurrency wallets while targeting developers through fake recruitment campaigns. Japan’s National Police Agency said on Sept.…

JapanNorth Korea
Sep 18, 2026 · byCrypto.news
North Korean Hackers Infect 30,000 PCs, Steal $10,700,000 in Crypto Through Fake IT Jobs: FBI

North Korean Hackers Infect 30,000 PCs, Steal $10,700,000 in Crypto Through Fake IT Jobs: FBI

A North Korean state-sponsored group known as WaterPlum is targeting IT professionals worldwide with fake job offers that deliver malware to steal cryptocurrency and financial data. The post North Korean Hackers Infect 30,000 PCs, Steal $10,700,000 in Crypto Through Fake IT Jobs: FBI appeared first on The Daily Hodl .

Federal Bureau of Investigationneutral
Federal Bureau of Investigation
Sep 21, 2026 · byThe Daily Hodl