North Korea Linked to $11 Million Crypto Theft Via Fake Job Offers

2026-09-25

A multi-agency advisory has linked North Korean state-sponsored hackers to a scheme involving fraudulent job interviews that resulted in the theft of approximately $11 million from over 7,000 cryptocurrency wallets. The operation is attributed to the WaterPlum hacking group.

VERA Brief

AI-generated. Grounded in the article and its cited sources.

A joint advisory from seven U.S. agencies links North Korean state-sponsored hackers, specifically the WaterPlum hacking group, to a cryptocurrency theft scheme. The hackers used fake job offers and interviews to trick victims into downloading malicious applications and transferring funds, resulting in the theft of approximately $11 million.

Key facts

  • A multi-agency advisory has linked North Korean state-sponsored hackers to a cryptocurrency theft scheme.
  • The scheme involved fraudulent job interviews where victims were persuaded to download malicious applications.
  • Over 7,000 cryptocurrency wallets were drained of funds totaling approximately $11 million.
  • The WaterPlum hacking crew, also known as Lazarus Group, is attributed to these activities.
  • The operation is believed to be an effort to fund weapons programs.

Source: Decrypt

Reported by VERA Newswire.

More from September 2026 in The Record.