A four-nation advisory ties WaterPlum to 30,000 infected devices, 7,000 drained wallets and $10.71 million in losses.