US seizes North Korean FaceStealer infrastructure and $1.2 billion
Original title: US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
Courts authorized seizure of more than $1.2 billion from a Binance theft the FBI attributes to TraderTraitor.
The Justice Department said it seized cloud infrastructure used in a North Korean social-engineering scheme called FaceStealer and obtained court authorization to seize more than $1.2 billion tied to Binance. The FBI attributes theft of more than $6 billion in virtual assets from Binance to military hackers it calls TraderTraitor, and says more than $2.7 billion has been frozen. An FBI alert describes hijacked chat accounts, fake Zoom and Teams sites, and recorded webcam videos reused to impersonate later targets. The same lure was used against a JavaScript library maintainer.
Unconfirmed: North Korean attribution and the Binance theft total are as stated by the Justice Department and FBI.
- Investigators froze more than $2.7 billion; courts authorized seizing more than $1.2 billion.
- The FBI seized more than 900 victim webcam videos used for later impersonation.
- The video-meeting campaign drained more than $400 million from crypto and Web3 in 18 months.
- Imposter Zoom and Teams sites were hosted on typo-squatted domains.
- Fake meeting lures were used to add malicious dependencies to a JavaScript library.
Impact: Billions in cryptocurrency stolen via impersonation and fake meetings
- 1.Treat unsolicited video-meeting links on Telegram, LinkedIn, Slack, and Discord as hostile.
- ATT&CK
- T1566.002 Spearphishing LinkT1583.001 DomainsT1036 MasqueradingT1656 ImpersonationT1195.001 Compromise Software Dependencies and Development Tools
- Malware
- FaceStealer
- Victims
- Binance
- Countries
- North KoreaUnited States
From the original article
4 min read at cyberscoop.com
The infrastructure, said to belong to APT38, contained footage used to fool victims over video calls. The post US seizes North Korean hacking infrastructure, $1. 2 billion in cryptocurrency stolen from Binance appeared first on CyberScoop.
By Greg Otto · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.