09/18/2026
North Korean cyber group “WaterPlum” (aka “Contagious Interview”) is compromising job seekers’ computer networks, harvesting sensitive data, and stealing cryptocurrency. WaterPlum is targeting IT professionals in Japan, the United States, Europe, and beyond.
Posing as prospective employers, these actors go after software developers and IT professionals with fake “dream job” offers. They impersonate legitimate AI, NFT, and cryptocurrency companies and use recruiting platforms to reach victims.
This threat is active right now. Read the new advisory from the , Japan’s National Police Agency, and other partners to learn about WaterPlum:https://www.ic3.gov/CSA/2026/260918.pdf