A seven-agency advisory has linked the WaterPlum hacking crew to North Korea’s remote information-technology worker scheme, identifying both as operations connected to the same bureau. The campaign used fake job interviews as part of an effort that drained approximately $11 million from 7,000 cryptocurrency wallets, according to information reported by Decrypt. The advisory highlights the overlap between cyberattacks targeting digital-asset holders and North Korea’s broader use of remote IT workers. The disclosure may increase scrutiny of recruitment and interview processes involving crypto companies, although the advisory does not identify specific assets or provide market forecasts. The reported losses span a large number of wallets, underscoring the potential reach of the scheme across the cryptocurrency sector.
