Czech cyber agency warns of North Korean attacks using fake job offers

Czechia’s National Cyber and Information Security Agency has warned IT professionals and organisations about cyberattacks by the North Korean group WaterPlum using fake job offers. The group poses as employers or recruiters, often representing supposed AI or cryptocurrency companies, to gain access to devices and sensitive information. During job interviews, applicants may be instructed to download and run malicious files disguised as programming assignments. According to an international analysis highlighted by the Czech agency, WaterPlum has compromised at least 30,000 devices in more than 100 countries and obtained funds or credentials from over 7,000 cryptocurrency wallets.