North Korean Cybercriminals Target 30,000 Devices, Steal $10.7M
WHO:
Cointelegraph - North Korean cyber group WaterPlum is involved in the cyberattacks.
WHAT:
TechRadar - The North Korean group, referred to as the "Contagious Interview" gang, has targeted 30,000 businesses worldwide with malware following fake interviews.
Cointelegraph - The group targeted developers with fake job offers, infecting at least 30,000 devices.
Cointelegraph - The cybercriminals stole $10.7 million in cryptocurrency.
WHERE:
Cointelegraph - The attacks affected devices across more than 100 countries.
WHY:
Inc - Authorities warn that the malicious coding assignments and video-conferencing fixes are designed to expose developers’ devices and their employers’ networks.
HOW:
Inc - The cyber group posed as recruiters to lure victims into downloading malicious software.
(UPDATED September 21, 2026 15:01 UTC)
A North Korean group known as the "Contagious Interview" gang has launched a widespread cyberattack, targeting 30,000 businesses around the globe with malware disguised as fake interviews. This alarming development highlights the ongoing threat posed by sophisticated cybercriminals. Experts are urging companies to remain vigilant and enhance their cybersecurity measures in light of this incident.
--
(UPDATED September 21, 2026 03:02 UTC)
A North Korean cyber group known as WaterPlum has been linked to a series of cyberattacks that targeted developers with fake job offers, infecting over 30,000 devices across more than 100 countries. These cybercriminals managed to steal an impressive $10.7 million in cryptocurrency by posing as recruiters and enticing victims to download malicious software disguised as coding assignments and video-conferencing fixes. Authorities are warning that these tactics are specifically designed to compromise both the developers' devices and their employers' networks.