North Korean WaterPlum Hackers Infected Over 30,000 Devices Worldwide
North Korea's WaterPlum hacking group compromised at least 30,000 devices globally and funneled over $10.7 million in stolen cryptocurrency back to the country.
According to a joint law enforcement advisory, the North Korean-linked hacking group WaterPlum has carried out a massive global cybercampaign. Between December 2025 and July 2026, the group successfully compromised at least 30,000 devices worldwide.
Investigators revealed that the hackers leveraged their access to steal substantial digital funds. They illicitly transferred more than $10.7 million worth of stolen cryptocurrency back to North Korea.
This large-scale operation highlights the persistent threat posed by state-sponsored cybercriminal organizations targeting digital assets. The monetization of cyberattacks through cryptocurrency theft continues to be a primary vector for these groups.
For cybersecurity professionals and organizations in Uzbekistan and the CIS region, this incident underscores the critical need for robust digital defenses. As global threat actors scale their operations, local entities must remain vigilant against potential cyber threats.
