WaterPlum
Unknown Dormant
- Mentions
- 3
- First seen
- 18 Sept 2026
- Last seen
- 19 Sept 2026
Origin
Unattributed
Profile
WaterPlum is a North Korean hacking group. The group has infected over 30,000 devices worldwide across more than 100 countries. The attackers exploit job offers to steal cryptocurrency and data. International security agencies warn about this campaign.
Targeted sectors
cryptocurrencydata
Targeted regions
globalworldwide
Activity (8 weeks)
Recent activity
- North Korean WaterPlum hackers infected 30,000 devices worldwide BleepingComputer
- International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data CyberScoop
- North Korean hackers infect thousands of devices across 100 countries as part of ‘WaterPlum’ campaign The Record from Recorded Future News