Seven agencies from four countries published a joint advisory on September 18, 2026, and it carries a finding that matters to anyone who holds their own keys: a North Korean threat group has used fake job offers to infect at least 30,000 machines in more than 100 countries, draining balances or credentials from over 7,000 crypto wallets. The signatories include Japan's National Police Agency and the FBI, alongside Germany's foreign intelligence service, the Bundesnachrichtendienst, and its domestic security agency, the Bundesamt für Verfassungsschutz.