Four Nations Jointly Attribute Crypto Thefts to WaterPlum Group

A joint advisory from Japan, the United States, Australia, and Germany has attributed a widespread campaign of crypto thefts to North Korea's WaterPlum group.

WaterPlum, also known as Contagious Interview, is said to have infected at least 30,000 machines across more than 100 countries, stolen around 7,000 crypto wallet records, and moved at least about 1.7 billion yen in digital assets.

The group targets IT engineers with fake job offers, delivering malware and draining crypto wallets, and has been linked to the Contagious Interview scheme.

Japanese police identified 'laptop farms' remotely operated by North Korean IT workers, which sent hundreds of millions of yen overseas, including crypto.