North Korean-linked hacker group WaterPlum, also known as Contagious Interview, compromised over 30,000 devices and drained approximately $10.71 million from more than 7,000 crypto wallets between December 2025 and July 2026. A joint advisory by the FBI and Japan’s National Police Agency confirmed the group targeted IT developers globally by posing as AI, cryptocurrency, and NFT companies offering fake employment opportunities. Attackers contacted job seekers through social media and recruitment platforms, using technical interviews and coding tests as cover to distribute malicious files. The campaign successfully infected devices across more than 100 countries, with stolen funds traced directly to attacker-controlled wallets.