Japan NPA/NCO, US FBI/DC3, Australia ASD's ACSC, Germany BND/BfV joint public attribution: "North Korean WaterPlum (Contagious Interview) Cyber Actor Group Targeting IT Professionals; Activities of North Korean IT Workers in Japan, the United States and Europe" (September 18, 2026)
IT worker extortion with published source code; IT worker website defacement · (not dated)
In one case, a North Korean IT worker extorted a company over payment and published its proprietary source code online. In another case, an IT Worker hired for website maintenance defaced the hiring company’s website and rendered the site inaccessible.