[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"focus:international-security-agencies-warn-about-north-korean-hackers-exploiting-job-s-mu9an60e":3},{"item":4},{"id":5,"title":6,"slug":7,"summary":8,"severity":9,"category":10,"cve_ids":11,"affected_products":12,"action_required":15,"article_ids":16,"ioc_summary":18,"source_urls":19,"status":21,"expires_at":22,"created_at":23,"updated_at":24,"articles":25},"fbe8890d-e46c-4ead-9200-671603d509e1","International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data","international-security-agencies-warn-about-north-korean-hackers-exploiting-job-s-mu9an60e","North Korean threat actor WaterPlum is conducting a large-scale social engineering campaign targeting software developers and IT professionals via fake job postings in AI and crypto sectors. The group has compromised over 30,000 devices globally and stolen nearly $11 million in cryptocurrency. Our developers and IT staff are high-value targets for this operation.","critical","advisory",[],[13,14],"FBI","Department of Defense’s Cyber Crime Center","Immediately alert all developers and IT staff to verify job opportunities through official company channels only. Block known WaterPlum C2 infrastructure at perimeter. Hunt for suspicious process execution, credential theft indicators, and unauthorized crypto wallet access on developer workstations.",[17],"20402449-e761-4109-8dc8-03e4dd3bbe29",null,[20],"https:\u002F\u002Fcyberscoop.com\u002Fnorth-korea-waterplum-job-seeker-crypto-attacks\u002F","active","2026-09-22T04:05:45.6+00:00","2026-09-20T04:05:52.877853+00:00","2026-09-20T04:07:23.14278+00:00",[26],{"id":17,"title":6,"url":20}]