North Korean WaterPlum hackers compromise 30,000 devices, launder $10.7M in crypto

A joint law enforcement advisory reports that the North Korean hacking group WaterPlum compromised at least 30,000 devices globally between December 2025 and July 2026, transferring over $10.7 million in stolen cryptocurrency to North Korea. The scale of the operation and the confirmed financial link to the DPRK underscore the group's sustained cyber-enabled sanctions evasion. The advisory corroborates prior reporting on North Korean cyber activity, but the full scope of the compromise and the ultimate destination of funds remain partially unverified.