North Korean cyber group WaterPlum used fake recruitment campaigns to target software developers, according to Cointelegraph. The group posed as employers from cryptocurrency, artificial intelligence and nonfungible token companies, distributing malware through bogus job opportunities. The campaign infected at least 30,000 devices across more than 100 countries and generated cryptocurrency theft estimated at $10.7 million. The incident highlights cybersecurity risks for developers and crypto-related businesses, where malicious recruitment approaches can be used to gain access to devices and digital assets. Cointelegraph reported the findings on September 21, 2026. The affected crypto market assets associated with this report include AKE, NFT, COMP, CRO, ONE, ORE, RPL and VELO.
