Press Releases
Public Attribution on North Korean Cyber Actor Group “WaterPlum,” and North Korean IT Workers
September 18, 2026
On September 18, the National Police Agency and the National Cybersecurity Office of Japan, with the relevant agencies of the United States, Australia and Germany, jointly issued an announcement on the tactics, techniques, and procedures (TTPs) of a North Korea-backed cyber actor group “WaterPlum” (commonly referred to as “Contagious Interview”) and activities of North Korean IT workers engaged in generating foreign currency and applying in a recruitment process.
The Ministry of Foreign Affairs also will continue to strengthen its efforts with the ally and like-minded countries and the private sector to address North Korea’s malicious cyber-related activities.

