From PCMAG · Michael Kan · · 1m
FBI Blames North Korean Group for Stealing $10.7M in Crypto
FBI warns North Korean hackers infected 30,000 PCs to steal crypto, targeting IT workers with fake job offers.
In brief
FBI warns North Korean hackers infected 30,000 PCs to steal crypto, targeting IT workers with fake job offers. WaterPlum group uses fake recruiters to infect systems and steal crypto, linked to North Korea's military R&D. Originally reported by PCMAG.
North Korean Hackers Target IT Workers
FBI blames a North Korean group for infecting 30,000 PCs globally to steal cryptocurrency.
Fake Job Offers Lead to Infection
Hackers trick IT professionals with fake 'dream job' offers for cryptocurrency and AI roles.
Malware Spreads via Coding Tests

Victims install malware under the guise of completing coding tests or troubleshooting video calls.
Stolen Funds Fuel North Korean Weapons
The group stole $10.7 million in crypto and is linked to North Korea's military R&D for weapons.
WaterPlum Uses Multiple Malware Tools
Malware includes BeaverTail, InvisibleFerret, OtterCookie, and other variants targeting Windows and macOS.
FBI Collaborates on Alert
FBI worked with Japan, Germany, and Australia to issue the alert about WaterPlum's activities.
What it means
WaterPlum group uses fake recruiters to infect systems and steal crypto, linked to North Korea's military R&D.

