CoinMeta data: Japanese police stated that the North Korean hacking group Waterplum has invaded over 30,000 devices in more than 100 countries and regions around the world, stealing records from over 7,000 cryptocurrency wallets. The investigation revealed that the group targeted developers through fake recruitment campaigns and used malware to steal confidential data, including browser credentials, keylog records, as well as private keys and mnemonic phrases for cryptocurrency wallets. Japanese and American authorities assess that Waterplum is closely linked to the activities of North Korean hackers from IT, involving foreign currency generation and recruitment schemes. The investigation also found that North Korean hackers contacted software developers through social media and online recruitment platforms, posing as legitimate artificial intelligence and cryptocurrency companies.