Topic

Fake-recruiter malware campaigns

Attacks in which operators pose as employers or recruiters and deliver malware through interview tasks, coding tests or job documents.

Current clusters

security1 publisher

North Korea's WaterPlum fake-recruiter campaign has stolen $10.7 million from IT workers

North Korea's WaterPlum stole $10.7 million in crypto from IT workers by posing as recruiters, infecting at least 30,000 devices. The FBI is investigating a separate ShinyHunters claim that agent data left its FBIjobs recruiting site.

Publishers:thecyberexpress.com

Reality

Evidence30
Adoption: Insufficient
Hype gap+20
Incentives: Insufficient
Confidence30

security8 publishers

Joint advisory pins WaterPlum's fake recruiters to North Korea's 313 General Bureau

Four governments have put a bureau name on the fake-recruiter campaign against software developers, and their alert says the same crews also work as North Korea's remote IT hires, from the same IP addresses.

Publishers:bleepingcomputer.comcyberscoop.cominfosecurity-magazine.comsecurityaffairs.comsecurityweek.comthecyberexpress.comthehackernews.comtherecord.media

Perspective Coverage

8 publishers

Builder: Builder 34%
Operator: Operator 52%
Investor: Investor 14%

Reality

Evidence70
Adoption: Insufficient
Hype gap+5
Incentives40
Confidence72