Hackers WaterPlum infected 30 thousand devices under the guise of recruiters

The hacker group WaterPlum conducted a large-scale cyberattack, compromising more than 30,000 devices worldwide. The attackers used social engineering tactics, posing as recruiters for major tech companies to install malware in software developers' work environments.

During the operation, the hackers managed to steal $11 million in cryptocurrency and gain access to users' confidential login credentials. The attack targeted specialists who actively use development and code management tools, allowing the attackers to establish a foothold in the infrastructure of various companies.

A technical analysis of the incident, discussed on Hacker News, confirms the use of sophisticated methods to bypass protection systems. The malware masqueraded as legitimate packages and scripts that developers often download to automate their tasks or test new libraries.

This incident highlights the growing risks to software supply chains, where trust in external code sources and job offers becomes a vector for cyber espionage. Security experts note that using automated code verification systems and strict access control to repositories remain the only effective methods of protection against such attacks.