North Korean hackers reportedly stole $10.7M through fake recruiting campaigns

North Korean hacking group WaterPlum reportedly posed as recruiters in the crypto and AI industries to distribute malware to job seekers.
The campaign is reported to have stolen at least $10.7 million while infecting more than 30,000 devices worldwide.
The incident highlights the growing use of fake recruitment and social-engineering campaigns to target crypto users and technology professionals, where malicious files or links can provide attackers with access to sensitive credentials and digital assets.