North Korean cyber group โWaterPlumโ (aka โContagious Interviewโ) is compromising job seekersโ computer networks, harvesting sensitive data, and stealing cryptocurrency. WaterPlum is targeting IT professionals in Japan, the United States, Europe, and beyond.
Posing as prospective employers, these actors go after software developers and IT professionals with fake โdream jobโ offers. They impersonate legitimate AI, NFT, and cryptocurrency companies and use recruiting platforms to reach victims.
This threat is active right now. Read the new advisory from the
@FBI,
@NPA_KOHO,
@DC3Forensics, and other partners to learn about WaterPlum:
ic3.gov/CSA/2026/260918.pdf