A North Korean state-linked cyber group has transferred the equivalent of $10.71 million in cryptocurrency to North Korea after targeting IT professionals in more than 100 countries through fake job interviews, according to a joint advisory from US, Japanese, Australian and German authorities.
The group, known as 'WaterPlum' and commonly referred to as 'Contagious Interview', was the subject of the advisory published on 18 September 2026 by the FBI, Japan's National Police Agency and National Cybersecurity Office, and the US Department of Defense Cyber Crime Center.