DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

WaterPlum (5)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
From around December 2025 through July 2026WaterPlum / Contagious Interview fake job-interview malware campaign (30,000 PCs, 100+ countries)WaterPlum ("Contagious Interview")
2025-05-15T03:00:00+00:00North Korean OtterCookie is back (fourth version)WaterPlum (rebranding of Famous Chollima); Contagious Interviews campaign
2025-05-08T08:01:07.000ZAdditional Features of OtterCookie Malware Used by WaterPlumWaterPlum (Famous Chollima, PurpleBravo)
(as of September 18, 2026)First laptop farm dismantled in JapanJapanNorth Korean IT workers; WaterPlum
17/03/2026Developers and professionals involved in blockchain-related projects.GlobalWaterPlum (part of the Contagious Interview Campaign from North Korea)