North Korean cyber group WaterPlum has reportedly infected over 30,000 devices worldwide by posing as recruiters offering jobs in crypto, AI, and NFT companies, according to CoinTelegraph. The attack spanned more than 100 countries, targeting developers with fake job offers to spread malware.
Through this method, WaterPlum managed to steal approximately $10.7 million in cryptocurrency. The group’s sophisticated social engineering tactics highlight ongoing risks in the crypto sector from state-sponsored cybercriminals leveraging emerging tech trends.
For Japanese investors and developers, this incident underscores the importance of vigilance when responding to unsolicited job offers in the crypto and AI industries, especially as Japan’s digital asset market continues to grow.