Four Countries Attribute “Contagious Interview” Fake-Job Malware Campaign to North Korea’s WaterPlum
Fri Sep 18 2026
APT
Cryptocurrency
Government
Law Enforcement
Malware
Threat Intel
thecyberexpress.com
Japan, the United States, Australia and Germany, today issued a joint cybersecurity advisory formally attributing the long-running "Contagious Interview" campaign to a North Korean state-sponsored group they are calling WaterPlum. The operation has infected more than 30,000 computers in more than 100 countries and stolen about 1.7 billion yen, or some $10.7 million, in cryptocurrency.
The advisory carries the seals of Japan's National Police Agency and National Cybersecurity Office, the FBI and the U.S. Defense Department's Cyber Crime Center, the Australian Signals Directorate's Australian Cyber Security Centre and Germany's BND and BfV intelligence services. It places WaterPlum under the...