Security/press release/2026-09-20

North Korean hackers used fake job interviews to infect 30,000 devices with malware

A North Korean hacking group, identified as WaterPlum or the 'Contagious Interview' gang, reportedly deployed malware on approximately 30,000 devices or businesses globally. The attacks involved using fake job interviews, often including coding tests, to trick victims into installing persistent remote access trojans (RATs). One report indicates the group also looted $10.7 million in cryptocurrency.

2 articles from 2 outlets covered this story. Their coverage differs on 2 points. The underlying claim is sourced from a press release.

What do all outlets agree on?

2 outlets covered “North Korean hackers used fake job interviews to infect 30,000 devices with malware”. All of them report the following:

  • North Korean hackers used fake job interviews
  • Malware deployed via coding tests
  • Affected approximately 30,000 entities
  • Malware included persistent RATs
  • Cryptocurrency was looted

Did outlets disagree about this?

Yes. Coverage of “North Korean hackers used fake job interviews to infect 30,000 devices with malware” differs on 2 points. Each account below is how a different outlet described the same event:

WaterPlum group

trade, reads as safety

'Contagious Interview' gang

TechRadar Pro

Which figures do outlets report differently?

1 figure in this story is reported with conflicting values:

Affected entities30,000 devices vs 30,000 businesses

Which outlets covered this?

All 2 articles found on this story, grouped by the stance of the piece. Every link goes to the original publisher.

What related stories are there?

Get the week in AI in one email

What happened, which outlets reported it, and where their coverage differed. One issue a week.

The first issue hasn’t gone out yet. Subscribe and it’s the one you’ll get.

We’ll send the digest and nothing else. One-click unsubscribe. Privacy.