North Korean fake recruiters infect 30K devices, steal $10.7M in crypto

Written and edited by the WorldPing NewsdeskPublished Updated Original reporting: Cointelegraph
North Korean fake recruiters infect 30K devices, steal $10.7M in cryptoWorldPing
Image via Cointelegraph.

What happened

North Korean cyber group WaterPlum targeted developers with fake jobs at crypto, AI and NFT companies, infecting at least 30,000 devices across more than 100 countries.

Key facts

  • North Korean cyber group WaterPlum targeted developers with fake jobs at crypto, AI and NFT companies, infecting at least 30,000 devices across more than 100 countries.
  • Reported by Cointelegraph and published Mon, 21 Sep 2026 01:42:53 UTC.

Why it matters

Digital-asset markets react to catalysts within minutes, and liquidity, ETF flows and regulatory signals are usually what decide whether a move sticks.

What to watch next

  • Whether spot volume and open interest confirm the move
  • Liquidation clusters around the current price
  • ETF flow data and any regulatory follow-up

Coverage timeline

When each newsroom published on this story, oldest first — all times UTC.

  1. Crypto platform Gemini’s stock is down 80% from its IPO. That’s reviving takeover speculation

  2. EU staking review threatens crypto yields and network security could pay the price

  3. Why keeping your private keys safe won’t always stop crypto theft

  4. Four Armed Men Tie up Family in French Crypto Home Invasion

  5. One Attacker Hits Two Crypto Projects and Walks With $2 Million

  6. North Korean fake recruiters infect 30K devices, steal $10.7M in crypto

  7. Massive French Data Leaks Spark Surge in Fake Crypto Support Calls

Sources

The original report was published by Cointelegraph. WorldPing does not claim that reporting — this page summarises and contextualises it.

Read the full report at Cointelegraph

Follow the story

Living hubs that keep updating as this story develops.

Related WorldPing coverage

One Attacker Hits Two Crypto Projects and Walks With $2 MillionWorldPing
Bitcoin.com

One Attacker Hits Two Crypto Projects and Walks With $2 Million

One attacker appears to have cracked two separate crypto projects in the same minute, draining 8.72 million FET from a Fetch.ai converter while minting roughly 408.5 million NTX at Nunet. The combined damage landed around $2.

Brief by WorldPing · Original reporting by Bitcoin.com

Why keeping your private keys safe won’t always stop crypto theftWorldPing
CryptoSlate

Why keeping your private keys safe won’t always stop crypto theft

Almost 4,000 Bitcoin left Liquid's reserve on Sept. 6 through a withdrawal the network approved, even though the private keys used to authorize it hadn't been stolen. Software had accepted a withdrawal that should never have qualified.

Brief by WorldPing · Original reporting by CryptoSlate