Archive · 21 Sep 2026
AI-Fueled Fake Interviews Help Hackers Target Job Seekers
A hacker group called WaterPlum targeted people looking for jobs.
The group started operating in 2023.
It contacted job seekers on websites and social media.
The hackers pretended to work for cryptocurrency companies or artificial-intelligence firms.
They invited people to online interviews.
They also gave victims coding tasks to make the offers seem real.
Fake interview links were used in the scams.
The group pursued money and also conducted cyberespionage.
The WaterPlum group became active in 2023 and carried out financially motivated attacks and cyberespionage.
The group contacted job seekers through gig-work sites, freelance platforms, online job portals and social media.
Attackers posed as cryptocurrency companies or recruiters from artificial-intelligence firms.
Victims were invited to virtual interviews and given coding assignments as part of the deception.
The campaign allegedly used fake interview links to steal millions from job seekers.
- Who
- The WaterPlum hacker group targeted job seekers.
- What
- The group used fake job opportunities, virtual interviews, coding assignments and interview links in attacks.
- When
- The group became active in 2023.
- Where
- The contacts occurred through gig-work sites, freelance platforms, online job portals and social media.
- Why
- The group conducted financially motivated attacks and cyberespionage.
- Group
- WaterPlum
- Activity began
- 2023
- Targets
- Job seekers
- Impersonated organizations
- Cryptocurrency companies and artificial-intelligence firms
- Contact channels
- Gig-work sites, freelance platforms, online job portals and social media
- Tactics
- Virtual interviews, coding assignments and fake interview links
- Motives
- Financial gain and cyberespionage