DOJ seizes $1.2 billion tied to North Korea crypto theft schemes
Original title: North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure
FaceStealer took more than $400 million in 18 months; over $2.7 billion of the Binance haul is frozen.
The Justice Department said it seized cloud infrastructure used in FaceStealer, a North Korea-linked scheme that stole more than $400 million in cryptocurrency over 18 months, and obtained authority to seize or restrain more than $1.2 billion from the October 29 Binance theft. Operators send meeting invites from stolen accounts, use deepfakes, and trick targets into installing malware, sometimes waiting months before theft. The same actors are targeting open-source developers. The department attributes the $6 billion Binance theft to TraderTraitor.
Unconfirmed: Theft totals and North Korea attribution are as stated by the Justice Department and FBI.
- The FBI seized more than 900 webcam videos recorded from FaceStealer victims.
- Cited tracking names include Sapphire Sleet, BlueNoroff and APT38.
- A public resource page is at fbi.gov/facestealer.
- Court action covers more than $1.2 billion of the Binance theft.
Impact: Cryptocurrency theft and account or repository takeover
- 1.Review FBI FaceStealer guidance at fbi.gov/facestealer if a video-meeting invite looks suspicious.
- Threat actors
- Sapphire SleetBlueNoroffAPT38TraderTraitor
- Malware
- FaceStealer
- Victims
- Binance
- Organizations
- U.S. Department of JusticeFBI
- Countries
- North KoreaUnited States
From the original article
5 min read at securityaffairs.com
The DOJ seized over $1. 2 billion from North Korea ‘s Binance theft, and says the same hackers are targeting open-source developers The U. S.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.