North Korean fake recruiters infect 30K devices, steal $10.7M in crypto
Published . Updated .
North Korean cyber group WaterPlum targeted developers with fake jobs at crypto, AI and NFT companies, infecting at least 30,000 devices across more than 100 countries.
Directly affected
- CRCW Crypto
Named in this report.
Indirectly affected
- IBIT iShares Bitcoin Trust
This price moves with the crypto market
- COIN Coinbase
The crypto exchange moves with trading volumes
- MSTR Strategy
This company's value is tied to its bitcoin holdings
- MARA MARA Holdings
Bitcoin miners move with the bitcoin price
- RIOT Riot Platforms
Bitcoin miners move with the bitcoin price
- HOOD Robinhood
Retail trading apps move with crypto volumes
- SUPX SUPERX AI TECHNOLOGY LTD
GA selected SUPX as a RELATED security because its canonical security name directly matches this event's themes: technology, ai. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.
- ABAT AMERICAN BATTERY TECHNOLOGY
GA selected ABAT as a RELATED security because its canonical security name directly matches this event's themes: technology. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.
- ACM AECOM TECHNOLOGY CORP
GA selected ACM as a RELATED security because its canonical security name directly matches this event's themes: technology. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.
- AOSL ALPHA & OMEGA SEMICONDUCTOR LT SHS
GA selected AOSL as a RELATED security because its canonical security name directly matches this event's themes: semiconductor. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article.
Price reaction, T-5 to T+3
North Korean cyber group WaterPlum targeted developers with fake jobs at crypto, AI and NFT companies, infecting at least 30,000 devices across more than 100 countries.
Source: Cointelegraph
SuperX AI Technology (SUPX) since this story, compared with the market
Since the first closing price after “North Korean fake recruiters infect 30K devices, steal $10.7M in crypto,” SuperX AI Technology (SUPX) is -2.82%. The S&P 500 fund (SPY) is -0.88% over the same days, a -1.93% difference versus the market.
Filings that name SuperX AI Technology (SUPX) around 21 Sep 2026
- Donald J Trump buy Aecom (ACM) ($1,001 - $15,000). That is 24 days before publication, inside 30 days. The filing is listed beside the story “North Korean fake recruiters infect 30K devices, steal $10.7M in crypto.”
- Donald J Trump sell Aecom (ACM) ($1,001 - $15,000). That is 28 days before publication, inside 30 days. The filing is listed beside the story “North Korean fake recruiters infect 30K devices, steal $10.7M in crypto.”
Public disclosure filings, not a recommendation. The filing link is the source document. News use of these reports still sits under 5 U.S.C. § 13107(c).
Who gains and who loses around SuperX AI Technology (SUPX)
Companies tied to this story
- SUPX SuperX AI Technology
For “North Korean fake recruiters infect 30K devices, steal $10.7M in crypto,” SuperX AI Technology (SUPX) is linked, with no stored direction, medium confidence. Reason on file: GA selected SUPX as a RELATED security because its canonical security name directly matches this event's themes: technology, ai. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article
- ABAT American Battery Technology
In “North Korean fake recruiters infect 30K devices, steal $10.7M in crypto,” American Battery Technology (ABAT) is linked, with no stored direction, medium confidence. Reason on file: GA selected ABAT as a RELATED security because its canonical security name directly matches this event's themes: technology. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article
- ACM Aecom
Aecom (ACM) is linked, with no stored direction, medium confidence in the 21 Sep 2026 story “North Korean fake recruiters infect 30K devices, steal $10.7M in crypto.” Reason on file: GA selected ACM as a RELATED security because its canonical security name directly matches this event's themes: technology. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article
- AOSL Alpha & Omega Semiconductor
In “North Korean fake recruiters infect 30K devices, steal $10.7M in crypto,” Alpha & Omega Semiconductor (AOSL) is linked, with no stored direction, medium confidence. Reason on file: GA selected AOSL as a RELATED security because its canonical security name directly matches this event's themes: semiconductor. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article
- BBAI BigBear.ai Holdings
BigBear.ai Holdings (BBAI) is linked, with no stored direction, medium confidence in the 21 Sep 2026 story “North Korean fake recruiters infect 30K devices, steal $10.7M in crypto.” Reason on file: GA selected BBAI as a RELATED security because its canonical security name directly matches this event's themes: ai. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article
- CHAT Roundhill Generative AI & Tech
Roundhill Generative AI & Tech (CHAT) is linked, with no stored direction, medium confidence in the 21 Sep 2026 story “North Korean fake recruiters infect 30K devices, steal $10.7M in crypto.” Reason on file: GA selected CHAT as a RELATED security because its canonical security name directly matches this event's themes: ai. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article
SuperX AI Technology (SUPX)
SuperX AI Technology (SUPX) is the company in “North Korean fake recruiters infect 30K devices, steal $10.7M in crypto,” the 21 Sep 2026 this story story.
SuperX AI Technology (SUPX) is on the page because GA selected SUPX as a RELATED security because its canonical security name directly matches this event's themes: technology, ai. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article
American Battery Technology (ABAT) is here too. Its reason reads: GA selected ABAT as a RELATED security because its canonical security name directly matches this event's themes: technology. This is an explainable DERIVED market relationship, not a claim that the security was named in the source article
Price levels for SuperX AI Technology (SUPX)
ABAT traded between 1.42 and 2.42 across 20 sessions. The latest close on file is 1.44. ACM traded between 56.41 and 63.73 across 20 sessions. The latest close on file is 57.99. SUPX traded between 6.15 and 7.09 across 10 sessions. The latest close on file is 6.72.
How strong the case is around SuperX AI Technology (SUPX)
46 out of 100
“North Korean fake recruiters infect 30K devices, steal $10.7M in crypto” scores 46 out of 100. The score uses 1 sources, and 6 linked companies.