WaterPlum Hacker Group Infects 30,000 Devices to Steal $10.7 Million in Cryptocurrency Assets

The North Korean hacker group WaterPlum disguised itself as a recruitment agency for cryptocurrency, AI, and NFT companies, deploying malware to software developers and IT professionals under the guise of programming tasks or video conference file repairs. The group infected at least 30,000 devices across more than 100 countries and extracted funds or account credentials from over 7,000 cryptocurrency wallets between December 2025 and July 2026, stealing at least $10.7 million.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.