waterplum

WaterPlum is the North Korean threat cluster also tracked as Contagious Interview, and the tagged coverage on WindowsForum focuses on how it turns developer hiring into a malware-delivery channel. According to a joint September 18 advisory from agencies in Japan, the United States, Australia, and Germany, the group compromised at least 30,000 PCs across more than 100 countries. The practical lesson for Windows developers and their employers is that unsolicited coding tests, Git repositories, NPM packages, and similar interview tasks should be treated as untrusted software rather than ordinary hiring material, since the operators also pursue cryptocurrency and account theft.