# North Korean WaterPlum hackers infected 30,000 devices worldwide

> **Newsylist Open Intelligence Dossier** · First detected: 2026-09-20 13:29 UTC · Category: Business · Sources: 9 · Current Velocity: 7.5

## Intelligence Brief
"North Korean WaterPlum hackers infected 30,000 devices worldwide" developed substantial multi-source reporting across the Business sector, tracked across 9 distinct newsrooms by Newsylist.


Key reporting was led by Modern Tokyo Times, Tom's Hardware, CryptoRank and inc.com. Coverage velocity and cross-outlet momentum were measured using Newsylist open coverage telemetry.


Synthesized from multi-source international reporting and live coverage telemetry under Newsylist open intelligence methodology.

## Verified Facts & Key Claims
### What drove coverage for North Korean WaterPlum hackers infected 30,000 devices worldwide?
Coverage spiked when 9 independent newsrooms published 10 verified reports during this coverage cycle.

### How did Newsylist track this trend?
Newsylist monitored article arrival rates, source diversity, and cross-outlet validation in real time.

## Key People, Organizations & Locations
North, Korean, WaterPlum

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| Modern Tokyo Times | North Korea and Cyber Warfare (Lazarus Group and ByBit Hack | 2026-09-19 14:05 | [Source Link](https://news.google.com/rss/articles/CBMipAFBVV95cUxPejFOYmY4WjVPYVRkckljV19xT0NROVFsdUNyMENKLXFILXlxeWluaVppVUVzTkJkcUZOWmNPS1hwUWZVWEtIdUg5U3p1OXlXSFlMM21UUHpMdmtqWGpORUJNNnZoQWhKWWF4LURVdmg4aVMzUDlqQlo0N3o2QnBLZjNXd2E2U0p3LTJBQkNSVWxRaEtDWFM0U1RoQlpSajJtN1ZJRg?oc=5) |
| Tom's Hardware | North Korea used job interviews to deploy malware on 30,000 devices during coding tests — WaterPlum group loots $10.7 million in crypto and plants persistent RATs | 2026-09-19 14:05 | [Source Link](https://news.google.com/rss/articles/CBMiwgJBVV95cUxOMjh1QnY2Zm8wY05KNnU1b0J2V3RtVklPOHdjQXVEdjQ4ZE1tOEM2bEFULVhsTDE2dzlENjV1d0JSNGo1UXRXY2pYQndrNXdXVm9aVDgwTE9STk5TUi03WGY0VlN3dnhmLUE3eDVGV1RXdmNxdDlBNEdyR3p5aENqcDVjQ0xfT0VXWmM0MHdEQzByWm1PRmxpdXNWV3oyTzVhVy1LdVpVNVJTamMxeHRZZWl5ZkxCRzRNSEhIWldBQ2RCTkdZY3BKcGtrMWlTaTR1THNpYndRZE1PMDdIRDRtWWJYTGdPeGYyaFRPMGd1V29UZC1tU3Zvd2NUY3BMa3pYWmdaU3hic0duLVpWX0pyV0hBNGxkbEhkRDhJQXR6dVhiaUVhQ3RNMWhidjlfd3o5R0gyeGJ2a2xmZ3N5REphalp3?oc=5) |
| CryptoRank | How Fake Job Offers Are Stealing Crypto Developers’ Wallet Data—and How to Spot Them | 2026-09-19 14:05 | [Source Link](https://news.google.com/rss/articles/CBMivgFBVV95cUxOaWxRSHdGU2Ezb3EybHFkdnZ3NmdXWkhnTmJQU0diMVI1Sjh2d1BvbTlrMWIxdWJTM19SMnlYRTZKbmxBSDZ6WUlBZVdHUWcxRFhHTnlWbnFBcnNuOTZCXzdIY3hWdEJueVh1cHRGa21GcWpPYWdVVlEydmotS042VmFtUVZodnlDaDg4LVIyUHN6bjR0bGxxVjJXYVh2SHNXRUk1dmRBWkszTEs0TVotb1VsMVdDaVJYQm9fYVNn?oc=5) |
| inc.com | North Korean Hackers Posed as Recruiters. They Infected 30,000 Devices Worldwide | 2026-09-19 14:05 | [Source Link](https://news.google.com/rss/articles/CBMitgFBVV95cUxQR2xBTFBkLWFKS3daN2FZckR1bUJkbndrYzdIekREckxCU2hMUVBMSVBJSG9YdHNvVGJGdTdNdjYxM1JCOVV0VHNvaHd5WXA1Rkh4ZXZveHV2NmxDVDJ2ZWZ1bnpZZzhOV2xER1hGdWFuV25CZ0dUU3Z4T3RKdlI1VWEtYUl4eGc1QVFBR1B5ckFCSWQ4UHdVdlg0MjIycnhUTVZkU0VYZjY3YVZGUWFnNm9KRnBrZw?oc=5) |
| Binance | FBI and Japanese Police Warn of North Korea-Linked WaterPlum Hackers Targeting IT Developers | 2026-09-19 14:05 | [Source Link](https://news.google.com/rss/articles/CBMi7wFBVV95cUxNcmZYcjFwSnZuWWk5aEFBc2tmR1VCYmlpYVo3ejd0Rk5kbWpkZVptOGNqQ1ByM3MwOHNDaDM0dmFVWlFENG5Db0gzbUY4aXpjMUQ5ZUdRNVdKeC00aktkZ3dTb0V3aEp0M0lLUWpnU0JVbEFrUlJDS2FyT2EtQmFmcWJDNGxGSEJKNUVhRVFIOVZZNFhIV01IYnhyN0NyNmlSNGx2LTRsdUIxbWNmNTRWYVJKOVMwZ0ZIejVta1h3aVV3ZW5ZZS1SLVBzcldoTWdmNFFRSUZPRXFta010QldXUWhYSm54WHNYM2hlWVF1bw?oc=5) |
| Binance | FBI and Japanese Police Warn of North Korea-Linked WaterPlum Hackers Targeting IT Developers | 2026-09-19 14:05 | [Source Link](https://news.google.com/rss/articles/CBMiZEFVX3lxTE5ScFJjLVluNjZOeWZ5aktYYkNHUGU3dmVrVUg2cTF1UmxhTEN5dDlUdmY2czlXanozRmtWMWFseEdVTVZMVnVqakVMU1FCSkFERV9iS3Y4R1I1akwzR013UHA1VzY?oc=5) |
| Yahoo | Hackers Infect 30,000 Devices, Drain $11 Million From Crypto Wallets | 2026-09-19 14:05 | [Source Link](https://news.google.com/rss/articles/CBMijwFBVV95cUxNQ0FKVTZXM0kxU0hGRFNHQ2JKZWIxdmVtMXpQOXZPd3VSTnhmZzJtYlRCNTBnZG56M0E5UXhBYWJzcmJreVBJYnpVZUhhQ3pVT29TM2FuUS1BRnRlQ0dRalRWUGY1Y2ExRFhjSTNxSnpuRVFOWGNzdnF5UzZKRFVHVFByc2UtdGRtWGFFOGhXTQ?oc=5) |
| The Register | North Korea's fake job interviews infected 30,000 devices | 2026-09-19 14:05 | [Source Link](https://news.google.com/rss/articles/CBMisAFBVV95cUxPRVE4U2JET2dQcFVjNFlRQ3JEaW95Wm9QTFBnZ2RPNXRLZFZzeXBiNkJLUUxzTzdWMU43WmlqREtEaHJtcnQ3dU1Gb3pZVHI5YWswSUJ6eVQxZUpZQTU1YkZMblhVZGJ6VUtKN2I5bnk4U1JnRlpoUVJqWnZUN0tSTUZLSDB5TDNVdDFZUWJROW9CeHdsOHZrN3hENnBpRVFDX2JBcElfa3BtV05SenlfMQ?oc=5) |
| The Japan Times | North Korean hackers behind crypto thefts across 100 countries, including Japan | 2026-09-19 14:05 | [Source Link](https://news.google.com/rss/articles/CBMipwFBVV95cUxQbGMtRXI4T3dkeVdGNWszSHZDZVBLWGttdjktalU1NjNxN29Ec1ZEVXFjRFhqY3dueXl1Y1JJb3ByeTF5a3ZMTVZrODFDQVlLeDVrNjB0RzR3SjZ4TmdDME5qMzlmTWxGYzNWa2dLVkliOElRckx6QzBmMGZHU1NwbHViS3FpTTUyQV9MOWUzSmhZd3Qwa2RuWnY4Nm5fSDFBZTlKdVRfcw?oc=5) |
| BleepingComputer | North Korean WaterPlum hackers infected 30,000 devices worldwide | 2026-09-19 14:05 | [Source Link](https://news.google.com/rss/articles/CBMisgFBVV95cUxPRnEwcmNiREpqb213ZUtyZG5YMkRyRUxDV0VEbWVPUmpGbzNGaUEybEpKaWVKaEJTdkM2WjVKS041cGt3RldfX3UyV1ZpaHhmOURIYXI4dXIwNGFLWmxDMkJRZ3J1R3NxV1JNOVFxMExORE5xTXBYa0RpTVRDSmtYSWF5Y3pPQnpLY0dYcW9CX3lCOXU2ZnVOdkJhcmtWMklmck1RMEUwWnhBak5haHliWGFn0gG3AUFVX3lxTE12Q3l0QmQ4TEwxcG5pWS1pdjM2dEdpSlI0Q3luUVh1RHRjSzVuV3AxOTFScFlMTllBWm9iUy1jaDRHY1p2b09iNXhYU2tuQkV6U3RndHFpRllrUS11TGxKbFlXS1FIUlMtdFdCLTgtekYxWVc3Sm40aUlSRTFMMUV2eEZrd3BrQUluaEV1YzZvQXFXMTJWcnhfVnlQN2V1Skh) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-09-20/north-korean-waterplum-hackers-infected-30-000-devices-worldwide*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*