North Korean WaterPlum hackers infected 30,000 devices worldwide
A joint law enforcement advisory reports that North Korean hacking group WaterPlum compromised at least 30,000 devices globally between December 2025 and July 2026, siphoning more than $10.7 million in cryptocurrency that was transferred back to North Korea.
Why this matters: Thirty thousand compromised devices is not a footnote. That is a wide net, and most of the people inside it probably had no idea. North Korea has spent years using cybercrime to fund a sanctioned state, and cryptocurrency makes that harder to stop and easier to hide. The real issue is that ordinary devices are being turned into revenue streams for a foreign government. That is not abstract. It means your machine, your wallet, your credentials can be part of that pipeline without you ever knowing.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.