North Korea-linked hacking group WaterPlum—also tracked as “Contagious Interview”—has stolen at least $10.7 million by tricking job seekers into installing malware under the guise of recruitment for legitimate crypto and AI companies, according to a joint cyber advisory issued by authorities in Japan, Germany, Australia, and the United States.