The group, also known as Contagious Interview, operates under the 313 General Bureau of the Munitions Industry Department subordinate to the Workers Party of Korea. These operations coordinate with North Korean IT workers to infiltrate computer networks for sensitive information. The joint alert released Friday identified the group's focus on stealing digital assets and corporate data from tens of thousands of computer networks.
Wednesday, October 21, 2026
Story
North Korean WaterPlum Group Steals $10.7 Million via Fake Job Recruitment
Cybersecurity29 days ago
A joint security advisory issued by four governments warns of a global malware campaign that targeted job seekers across more than 100 countries. The North Korean group WaterPlum stole $10.7 million in cryptocurrency by masquerading as employers from artificial intelligence firms and infecting more than 30,000 devices. Targeted individuals, including Rust developers, were tricked into running malicious code or sharing credentials to grant the attackers access to secure networks.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.