North Korean WaterPlum hackers infected 30,000 devices worldwide
Summary
A joint law enforcement advisory has revealed that the North Korean hacking group WaterPlum compromised at least 30,000 devices globally between December 2025 and July 2026. The group successfully transferred over $10.7 million in stolen cryptocurrency to North Korea during this period.
IFF Assessment
The article details a successful cryptocurrency theft operation by a state-sponsored hacking group, indicating a direct financial loss for victims and a gain for malicious actors.
Defender Context
This incident highlights the persistent threat of nation-state actors targeting cryptocurrency assets. Defenders should be aware of advanced phishing and social engineering tactics employed by groups like WaterPlum to gain initial access and protect their users' digital wallets and financial transactions.