Executive Summary

The WaterPlum hacking group, linked to North Korea, compromised at least 30,000 devices globally between December 2025 and July 2026. They exfiltrated data and transferred over $10.7 million in stolen cryptocurrency to North Korean accounts, according to a joint law‑enforcement advisory. The incident highlights the group's expanding reach and financial motives.

---

Intelligence Metadata - Source Publisher: Bleeping Computer - Published Date: 2026-09-19T14:05:15+00:00 - Category: threat-intel

Original Description: A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide from December 2025 through July 2026 and transferred more than $10.7 million in stolen cryptocurrency to North Korea. [...]

"Yesterdays home runs don't win today's games."

— Babe Ruth