# North Korean WaterPlum hackers infected 30,000 devices worldwide

> **Open Intelligence Dossier** · First detected: 2026-09-20 13:00 UTC · Category: Business

## Executive Summary
8 news sources are covering this Business story right now — PULSE is tracking how fast it spreads.

## Intelligence Brief
"North Korean WaterPlum hackers infected 30,000 devices worldwide" is generating significant coverage in the Business category, with 9 articles from 8 distinct sources tracked by PULSE so far.


Outlets currently covering the story include Tom's Hardware, CryptoRank, inc.com and Binance. PULSE measures a story's velocity from how quickly new articles appear and how many independent newsrooms join the coverage.


This brief was generated by PULSE's extractive engine from coverage metadata only. The latest headlines from every source are listed below; the velocity chart shows how the story is developing in real time.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| Barracuda Networks Blog | The fake worker threat and the rise of human infiltration | [Source Link](https://news.google.com/rss/articles/CBMimwFBVV95cUxQdDJvNWNpNUtGa28xd2lSQndBWjJDZ0xyMDJyczFwQ3NGbE9fTFJvSjJ5QlI4Q1BsV1lyWWxZd0NEekZIQzNTckVFYVhicU92OU5lRGloaEd3WlZYT21aOUdWQmZEMDNJWUxHVFo0TDhMbkwyeXAtRFhaNG5semxsNkxxVTM0SFdOX0FHMV90WDYtem1WZV9kM2tKaw?oc=5) |
| Modern Tokyo Times | North Korea and Cyber Warfare (Lazarus Group and ByBit Hack – Lawsuit Filed) | [Source Link](https://news.google.com/rss/articles/CBMipAFBVV95cUxPejFOYmY4WjVPYVRkckljV19xT0NROVFsdUNyMENKLXFILXlxeWluaVppVUVzTkJkcUZOWmNPS1hwUWZVWEtIdUg5U3p1OXlXSFlMM21UUHpMdmtqWGpORUJNNnZoQWhKWWF4LURVdmg4aVMzUDlqQlo0N3o2QnBLZjNXd2E2U0p3LTJBQkNSVWxRaEtDWFM0U1RoQlpSajJtN1ZJRg?oc=5) |
| Tom's Hardware | North Korea used job interviews to deploy malware on 30,000 devices during coding tests — WaterPlum group loots $10.7 million in crypto and plants persistent RATs | [Source Link](https://news.google.com/rss/articles/CBMiwgJBVV95cUxOMjh1QnY2Zm8wY05KNnU1b0J2V3RtVklPOHdjQXVEdjQ4ZE1tOEM2bEFULVhsTDE2dzlENjV1d0JSNGo1UXRXY2pYQndrNXdXVm9aVDgwTE9STk5TUi03WGY0VlN3dnhmLUE3eDVGV1RXdmNxdDlBNEdyR3p5aENqcDVjQ0xfT0VXWmM0MHdEQzByWm1PRmxpdXNWV3oyTzVhVy1LdVpVNVJTamMxeHRZZWl5ZkxCRzRNSEhIWldBQ2RCTkdZY3BKcGtrMWlTaTR1THNpYndRZE1PMDdIRDRtWWJYTGdPeGYyaFRPMGd1V29UZC1tU3Zvd2NUY3BMa3pYWmdaU3hic0duLVpWX0pyV0hBNGxkbEhkRDhJQXR6dVhiaUVhQ3RNMWhidjlfd3o5R0gyeGJ2a2xmZ3N5REphalp3?oc=5) |
| CryptoRank | How Fake Job Offers Are Stealing Crypto Developers’ Wallet Data—and How to Spot Them | [Source Link](https://news.google.com/rss/articles/CBMivgFBVV95cUxOaWxRSHdGU2Ezb3EybHFkdnZ3NmdXWkhnTmJQU0diMVI1Sjh2d1BvbTlrMWIxdWJTM19SMnlYRTZKbmxBSDZ6WUlBZVdHUWcxRFhHTnlWbnFBcnNuOTZCXzdIY3hWdEJueVh1cHRGa21GcWpPYWdVVlEydmotS042VmFtUVZodnlDaDg4LVIyUHN6bjR0bGxxVjJXYVh2SHNXRUk1dmRBWkszTEs0TVotb1VsMVdDaVJYQm9fYVNn?oc=5) |
| inc.com | North Korean Hackers Posed as Recruiters. They Infected 30,000 Devices Worldwide | [Source Link](https://news.google.com/rss/articles/CBMitgFBVV95cUxQR2xBTFBkLWFKS3daN2FZckR1bUJkbndrYzdIekREckxCU2hMUVBMSVBJSG9YdHNvVGJGdTdNdjYxM1JCOVV0VHNvaHd5WXA1Rkh4ZXZveHV2NmxDVDJ2ZWZ1bnpZZzhOV2xER1hGdWFuV25CZ0dUU3Z4T3RKdlI1VWEtYUl4eGc1QVFBR1B5ckFCSWQ4UHdVdlg0MjIycnhUTVZkU0VYZjY3YVZGUWFnNm9KRnBrZw?oc=5) |
| Binance | FBI and Japanese Police Warn of North Korea-Linked WaterPlum Hackers Targeting IT Developers | [Source Link](https://news.google.com/rss/articles/CBMi7wFBVV95cUxNcmZYcjFwSnZuWWk5aEFBc2tmR1VCYmlpYVo3ejd0Rk5kbWpkZVptOGNqQ1ByM3MwOHNDaDM0dmFVWlFENG5Db0gzbUY4aXpjMUQ5ZUdRNVdKeC00aktkZ3dTb0V3aEp0M0lLUWpnU0JVbEFrUlJDS2FyT2EtQmFmcWJDNGxGSEJKNUVhRVFIOVZZNFhIV01IYnhyN0NyNmlSNGx2LTRsdUIxbWNmNTRWYVJKOVMwZ0ZIejVta1h3aVV3ZW5ZZS1SLVBzcldoTWdmNFFRSUZPRXFta010QldXUWhYSm54WHNYM2hlWVF1bw?oc=5) |
| Binance | FBI and Japanese Police Warn of North Korea-Linked WaterPlum Hackers Targeting IT Developers | [Source Link](https://news.google.com/rss/articles/CBMiZEFVX3lxTE5ScFJjLVluNjZOeWZ5aktYYkNHUGU3dmVrVUg2cTF1UmxhTEN5dDlUdmY2czlXanozRmtWMWFseEdVTVZMVnVqakVMU1FCSkFERV9iS3Y4R1I1akwzR013UHA1VzY?oc=5) |
| Yahoo | Hackers Infect 30,000 Devices, Drain $11 Million From Crypto Wallets | [Source Link](https://news.google.com/rss/articles/CBMijwFBVV95cUxNQ0FKVTZXM0kxU0hGRFNHQ2JKZWIxdmVtMXpQOXZPd3VSTnhmZzJtYlRCNTBnZG56M0E5UXhBYWJzcmJreVBJYnpVZUhhQ3pVT29TM2FuUS1BRnRlQ0dRalRWUGY1Y2ExRFhjSTNxSnpuRVFOWGNzdnF5UzZKRFVHVFByc2UtdGRtWGFFOGhXTQ?oc=5) |
| The Register | North Korea's fake job interviews infected 30,000 devices | [Source Link](https://news.google.com/rss/articles/CBMisAFBVV95cUxPRVE4U2JET2dQcFVjNFlRQ3JEaW95Wm9QTFBnZ2RPNXRLZFZzeXBiNkJLUUxzTzdWMU43WmlqREtEaHJtcnQ3dU1Gb3pZVHI5YWswSUJ6eVQxZUpZQTU1YkZMblhVZGJ6VUtKN2I5bnk4U1JnRlpoUVJqWnZUN0tSTUZLSDB5TDNVdDFZUWJROW9CeHdsOHZrN3hENnBpRVFDX2JBcElfa3BtV05SenlfMQ?oc=5) |
| The Japan Times | North Korean hackers behind crypto thefts across 100 countries, including Japan | [Source Link](https://news.google.com/rss/articles/CBMipwFBVV95cUxQbGMtRXI4T3dkeVdGNWszSHZDZVBLWGttdjktalU1NjNxN29Ec1ZEVXFjRFhqY3dueXl1Y1JJb3ByeTF5a3ZMTVZrODFDQVlLeDVrNjB0RzR3SjZ4TmdDME5qMzlmTWxGYzNWa2dLVkliOElRckx6QzBmMGZHU1NwbHViS3FpTTUyQV9MOWUzSmhZd3Qwa2RuWnY4Nm5fSDFBZTlKdVRfcw?oc=5) |
| BleepingComputer | North Korean WaterPlum hackers infected 30,000 devices worldwide | [Source Link](https://news.google.com/rss/articles/CBMisgFBVV95cUxPRnEwcmNiREpqb213ZUtyZG5YMkRyRUxDV0VEbWVPUmpGbzNGaUEybEpKaWVKaEJTdkM2WjVKS041cGt3RldfX3UyV1ZpaHhmOURIYXI4dXIwNGFLWmxDMkJRZ3J1R3NxV1JNOVFxMExORE5xTXBYa0RpTVRDSmtYSWF5Y3pPQnpLY0dYcW9CX3lCOXU2ZnVOdkJhcmtWMklmck1RMEUwWnhBak5haHliWGFn0gG3AUFVX3lxTE12Q3l0QmQ4TEwxcG5pWS1pdjM2dEdpSlI0Q3luUVh1RHRjSzVuV3AxOTFScFlMTllBWm9iUy1jaDRHY1p2b09iNXhYU2tuQkV6U3RndHFpRllrUS11TGxKbFlXS1FIUlMtdFdCLTgtekYxWVc3Sm40aUlSRTFMMUV2eEZrd3BrQUluaEV1YzZvQXFXMTJWcnhfVnlQN2V1Skh) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-09-20/north-korean-waterplum-hackers-infected-30-000-devices-worldwide*