North Korean hackers used fake video meetings and impersonations of trusted contacts to steal more than $400 million in cryptocurrency over 18 months, according to the FBI. The…
Original source excerpt
North Korean hackers used fake video meetings and impersonations of trusted contacts to steal more than $400 million in cryptocurrency over 18 months, according to the FBI. The campaign, called FaceS…
North Korean hackers used fake video meetings and impersonations of trusted contacts to steal more than $400 million in cryptocurrency over 18 months, according to the FBI. The campaign, called FaceStealer, began with invitations from compromised accounts. Attackers replayed stolen webcam footage or used AI-generated impersonations to make targets believe they were speaking with someone familiar. During the meeting, the attackers introduced a supposed technical problem and supplied a troubleshooting link. The proposed fix installed malware, allowing them to steal digital assets or exploit the victim’s access to other systems. The Justice Department said authorities disrupted infrastructure supporting the campaign and seized more than 900 webcam recordings. Investigators also warned that open-source software maintainers were being targeted, potentially exposing software repositories as well as individual accounts. In a separate Binance theft attributed to North Korea, authorities and private partners froze more than $2.7 billion. The Justice Department obtained court authorization to seize or restrain over $1.2 billion. Binance said it had replenished the stolen customer funds. The case shows why a familiar face on a screen is no longer sufficient proof of identity. The attackers combined stolen relationships with convincing video and a routine request for technical help, turning an ordinary professional interaction into a route to financial and software access.
AI context is not available for this statement. The original source can be read independently.