FBI: North Korean FaceStealer calls stole over $400M in crypto
Original title: North Korean hackers used fake video calls in $400M crypto hack, says FBI
More than 900 crypto and web3 workers were hit in 18 months after malware arrived through a fake audio-fix link.
The FBI says state-sponsored North Korean hackers took more than $400 million in cryptocurrency through a scheme it calls FaceStealer. More than 900 people in crypto and web3, especially open-source developers, were targeted over 18 months. Fake or hijacked social accounts invite victims to imposter Zoom, Microsoft Teams, or Google Meet calls that play recordings of acquaintances, then a link to “fix” audio installs malware that reaches contacts and apps. Calls are secretly recorded and reused.
Unconfirmed: Theft totals and North Korean attribution are US authorities’ statements; Pyongyang denied the separate Binance claim.
- The FBI says proceeds help fund North Korea’s weapons program.
- Hackers use fake or hijacked social media accounts to start the calls.
- Recorded calls of earlier victims are replayed to people those victims know.
- US agencies also attributed a separate $6.3bn Binance theft to North Korea-linked actors.
Impact: Malware access to devices, contacts, and apps, plus crypto theft
- 1.Treat unexpected video-call audio-fix links on Zoom, Teams, or Meet as malicious.
- Products
- ZoomMicrosoft TeamsGoogle Meet
- Organizations
- FBIUS Justice Department
- Countries
- North KoreaUnited States
From the original article
2 min read at bbc.com
FBI redacted examples of the 900 victim videos secretly recorded by North Korean hackers State-sponsored hackers from North Korea have taken more than $400 million in cryptocurrency by using fake video calls to steal people's identities, US authorities say. More than 900 victims have fallen prey to the scheme, which the FBI refers to as FaceStealer, in the last 18 months, according to the bureau.
By saikiran91 · bbc.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.