# FBI Blames North Korean Group for Stealing $10.7M in Crypto

> FBI warns North Korean hackers infected 30,000 PCs to steal crypto, targeting IT workers with fake job offers.
- Title: FBI Blames North Korean Group for Stealing $10.7M in Crypto
- Summary: FBI warns North Korean hackers infected 30,000 PCs to steal crypto, targeting IT workers with fake job offers. WaterPlum group uses fake recruiters to infect…
- Keywords: fbi, waterplum, north korea, crypto theft, malware, beavertail, ai deepfakes, it job scams, nuclear weapons, military r&d, technology, Blames
- Source: PCMAG — https://pcmag.com/news/fbi-this-north-korean-group-infected-30000-pcs-to-steal-crypto
- Author: Michael Kan
- Published: 2026-09-18T16:04:51+00:00
- Read time: 1 min
- Topics: fbi, waterplum, north korea, crypto theft, malware, beavertail, ai deepfakes, it job scams, nuclear weapons, military r&d, technology
## North Korean Hackers Target IT Workers
FBI blames a North Korean group for infecting 30,000 PCs globally to steal cryptocurrency.
## Fake Job Offers Lead to Infection
Hackers trick IT professionals with fake 'dream job' offers for cryptocurrency and AI roles.
## Malware Spreads via Coding Tests
Victims install malware under the guise of completing coding tests or troubleshooting video calls.
## Stolen Funds Fuel North Korean Weapons
The group stole $10.7 million in crypto and is linked to North Korea's military R&D for weapons.
## WaterPlum Uses Multiple Malware Tools
Malware includes BeaverTail, InvisibleFerret, OtterCookie, and other variants targeting Windows and macOS.
## FBI Collaborates on Alert
FBI worked with Japan, Germany, and Australia to issue the alert about WaterPlum's activities.
## Key takeaway

WaterPlum group uses fake recruiters to infect systems and steal crypto, linked to North Korea's military R&D.