Geopolitics Alpha

North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets

Published . Updated .

A seven-agency advisory ties the WaterPlum hacking crew and Pyongyang's remote IT worker scheme to the same bureau.

Directly affected

  • CRCW Crypto

    Named in this report.

Indirectly affected

  • IBIT iShares Bitcoin Trust

    This price moves with the crypto market

  • COIN Coinbase

    The crypto exchange moves with trading volumes

  • MSTR Strategy

    This company's value is tied to its bitcoin holdings

  • MARA MARA Holdings

    Bitcoin miners move with the bitcoin price

  • RIOT Riot Platforms

    Bitcoin miners move with the bitcoin price

  • HOOD Robinhood

    Retail trading apps move with crypto volumes

  • EWY ISHARES MSCI SOUTH KOREA ETF

    GA selected EWY as a RELATED security because its canonical security name directly matches this event's themes: korea. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.

  • BITW BITWISE 10 CRYPTO INDEX ETF SHS REPSTG UNIT BEN INT

    GA selected BITW as a RELATED security because its canonical security name directly matches this event's themes: crypto. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.

  • BLOX NICHOLAS CRYPTO INCOME ETF

    GA selected BLOX as a RELATED security because its canonical security name directly matches this event's themes: crypto. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.

  • EZPZ FRANKLIN CRYPTO INDEX ETF

    GA selected EZPZ as a RELATED security because its canonical security name directly matches this event's themes: crypto. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.

Price reaction, T-5 to T+3

TickerT-5T-3T-1T0T+1T+2T+3
CRCW———————
IBIT———————
COIN———————
MSTR———————
MARA———————
RIOT———————
HOOD———————
EWY———————
BITW———————
BLOX———————
EZPZ———————

A seven-agency advisory ties the WaterPlum hacking crew and Pyongyang's remote IT worker scheme to the same bureau.

Source: Decrypt

Ishares Msci South Korea Etf (EWY) since this story, compared with the market

Since the first closing price after “North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets,” Ishares Msci South Korea Etf (EWY) is -14.24%. The S&P 500 fund (SPY) is -0.09% over the same days, a -14.15% difference versus the market.

EWY
SPY

Who gains and who loses around Ishares Msci South Korea Etf (EWY)

Companies tied to this story

  • EWY Ishares Msci South Korea Etf

    Ishares Msci South Korea Etf (EWY) is linked, with no stored direction, medium confidence in the 23 Sep 2026 story “North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets.” Reason on file: GA selected EWY as a RELATED security because its canonical security name directly matches this event's themes: korea. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

  • BITW Bitwise 10 Crypto Index ETF

    For “North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets,” Bitwise 10 Crypto Index ETF (BITW) is linked, with no stored direction, medium confidence. Reason on file: GA selected BITW as a RELATED security because its canonical security name directly matches this event's themes: crypto. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

  • BLOX Nicholas Crypto Income Etf

    Nicholas Crypto Income Etf (BLOX) is linked, with no stored direction, medium confidence in the 23 Sep 2026 story “North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets.” Reason on file: GA selected BLOX as a RELATED security because its canonical security name directly matches this event's themes: crypto. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

  • EZPZ Franklin Crypto Trust

    Franklin Crypto Trust (EZPZ) is linked, with no stored direction, medium confidence in the 23 Sep 2026 story “North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets.” Reason on file: GA selected EZPZ as a RELATED security because its canonical security name directly matches this event's themes: crypto. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

  • FDIG Fidelity Crypto Industry And Digital Payments Etf

    For “North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets,” Fidelity Crypto Industry And Digital Payments Etf (FDIG) is linked, with no stored direction, medium confidence. Reason on file: GA selected FDIG as a RELATED security because its canonical security name directly matches this event's themes: crypto. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

  • GDLC Grayscale CoinDesk Crypto 5 ETF

    In “North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets,” Grayscale CoinDesk Crypto 5 ETF (GDLC) is linked, with no stored direction, medium confidence. Reason on file: GA selected GDLC as a RELATED security because its canonical security name directly matches this event's themes: crypto. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

Ishares Msci South Korea Etf (EWY)

The 23 Sep 2026 story “North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets” names Ishares Msci South Korea Etf (EWY) because of this story.

What ties Ishares Msci South Korea Etf (EWY) to the headline is this: GA selected EWY as a RELATED security because its canonical security name directly matches this event's themes: korea. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

A second company, Bitwise 10 Crypto Index ETF (BITW), is listed for a different reason: GA selected BITW as a RELATED security because its canonical security name directly matches this event's themes: crypto. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article

Dates and price levels for Ishares Msci South Korea Etf (EWY)

BITW traded between 51.43 and 56.92 across 20 sessions. The latest close on file is 52.47. BLOX traded between 11.35 and 15.12 across 20 sessions. The latest close on file is 11.52. EWY traded between 149.75 and 192.99 across 20 sessions. The latest close on file is 156.51.

A simple score for Ishares Msci South Korea Etf (EWY)

46 out of 100

“North Korea's Fake Job Interviews Drained $11M From 7,000 Crypto Wallets” scores 46 out of 100. The score uses 1 sources, and 6 linked companies.