Japan NPA/NCO, US FBI/DC3, Australia ASD's ACSC, Germany BND/BfV joint public attribution: "North Korean WaterPlum (Contagious Interview) Cyber Actor Group Targeting IT Professionals; Activities of North Korean IT Workers in Japan, the United States and Europe" (September 18, 2026)
Suspected North Korean IT worker application to a Japanese cryptocurrency exchange (not hired) · In May 2025
In May 2025, a Japanese cryptocurrency exchange received an application for an engineering position. The applicant appeared to be a North Korean IT worker who submitted a forged resume through the company’s recruitment form.