Question 1

What is WaterPlum and who is behind it?

Accepted Answer

WaterPlum, also called "Contagious Interview," is a North Korean cyber group that Japan's NPA and the FBI assess operates under the 313 General Bureau of the Munitions Industry Department, part of the Workers' Party of Korea's Central Committee.

Question 2

How much cryptocurrency did WaterPlum steal?

Accepted Answer

The joint advisory says the group transferred 1.7 billion yen, about $10.71 million or roughly 14.5 billion Korean won, in stolen crypto to North Korea, after compromising credentials for around 7,000 cryptocurrency accounts.

Question 3

How did the hackers infect their victims?

Accepted Answer

They impersonated recruiters at AI, crypto and NFT companies and asked developers to complete coding tests or interviews, then had them download files carrying malware such as BeaverTail, InvisibleFerret and OtterCookie that stole wallet keys and login data.

Waterplum

North Korea’s WaterPlum hackers stole $10.7M in crypto, Japan and allies say

One sharp brief.
Every day.

Waterplum

North Korea’s WaterPlum hackers stole $10.7M in crypto, Japan and allies say

One sharp brief.Every day.

One sharp brief.
Every day.