Story thread · 3 reports / 3 sources

North Korean Hackers Posed as Recruiters. They Infected 30,000 Devices Worldwide

slashdot.org · 9h · first report

How the coverage leans

Across 3 sources · syndicated copies counted once

"I would like to verify your technical abilities, so please download the specified file and complete the assigned task..." Fake job listings aimed at software developers and IT professionals led to 30,000 infected devices in over 100 countries — and 7,000 compromised cryptocurrency wallets, leading to over $10 million (USD) transferred to North Korea. Inc. reports: The hacks occurred from December 2025 through July 2026, according to a joint cybersecurity advisory issued Friday by Japanese, Australian, German, and U.S. authorities, including the Federal Bureau of Investigation and the Defense Department's Cyber Crime Center... The group reportedly has been active since 2023, carrying out both financially motivated attacks and cyberespionage... The hackers lure job seekers through social media, online job platforms, gig-work sites and freelance marketplaces. WaterPlum asks responders to take part in virtual technical interviews or complete coding assignments. The attackers then instruct

The coverage

  1. North Korean hackers infected 30,000 devices worldwide by posing as tech recruiters

    qz.com · 2h

  2. Hackers use fake coding tests to infect 30,000 devices and steal $10 million in crypto

    techspot.com · 3h

The conversation · 0

Sign in to join the conversation.

No comments yet — start the thread.