North Korea Linked to $11 Million Crypto Theft Via Fake Job Offers
2026-09-25
A multi-agency advisory has linked North Korean state-sponsored hackers to a scheme involving fraudulent job interviews that resulted in the theft of approximately $11 million from over 7,000 cryptocurrency wallets. The operation is attributed to the WaterPlum hacking group.
VERA Brief
AI-generated. Grounded in the article and its cited sources.
A joint advisory from seven U.S. agencies links North Korean state-sponsored hackers, specifically the WaterPlum hacking group, to a cryptocurrency theft scheme. The hackers used fake job offers and interviews to trick victims into downloading malicious applications and transferring funds, resulting in the theft of approximately $11 million.
Key facts
- A multi-agency advisory has linked North Korean state-sponsored hackers to a cryptocurrency theft scheme.
- The scheme involved fraudulent job interviews where victims were persuaded to download malicious applications.
- Over 7,000 cryptocurrency wallets were drained of funds totaling approximately $11 million.
- The WaterPlum hacking crew, also known as Lazarus Group, is attributed to these activities.
- The operation is believed to be an effort to fund weapons programs.
Source: Decrypt
Reported by VERA Newswire.
More from September 2026 in The Record.