Advisory Details North Korean Cyber Group Targeting Global IT Professionals

A joint advisory from Australian, US, Japanese, and German authorities detailed a North Korean state-linked cyber group, known as 'WaterPlum' or 'Contagious Interview.' The group targeted IT professionals, software developers, and web freelancers in more than 100 countries through fake job interviews. Operatives lured victims into downloading files or executing code carrying malware during supposed technical tests, sometimes using AI face-swapping technology to appear as legitimate employers.

The group successfully transferred the equivalent of $10.71 million in cryptocurrency to North Korea. The advisory outlines the group's operational methods, which involve highly sophisticated social engineering and technical exploits against international business practices.