North Korea: The Federal Bureau of Investigation (FBI) reported that North Korean hackers stole more than $400 million in cryptocurrency through a cybercrime scheme involving fake video calls and identity theft.
The bureau reported more than 900 victims over the past 18 months. The FBI identified the operation as FaceStealer. The scheme uses deceptive online meetings to trick individuals into giving attackers access to their devices and digital accounts. Cryptocurrency professionals and people working in the Web3 sector remain the main targets.
The FBI and the US Department of Justice noted that the attackers aggressively target individuals involved in cryptocurrency operations. Professionals responsible for developing and maintaining open-source software face particular risks, making the campaign a serious concern for the wider digital asset industry.
The hackers approach potential victims through fake or compromised social media accounts. Victims receive invitations to join video meetings hosted through fraudulent versions of popular platforms, including Zoom, Microsoft Teams and Google Meet.
During these calls, attackers play pre-recorded videos featuring people known to the intended victims. These recordings, taken from previous victims, make the meetings appear genuine. However, the audio seems to malfunction, creating an opportunity for the hackers to deceive participants.
A message then appears on the victim’s screen, asking for the audio problem to be fixed through a provided link. Clicking the link downloads malware onto the device. Once installed, the malicious software gives attackers access to contact lists and applications. This information helps hackers identify additional targets and expand the operation.
The attackers also secretly record video calls. US authorities say these recordings serve as material for further scams. By reusing familiar faces and trusted contacts, hackers make subsequent invitations more convincing and increase the likelihood of deceiving new victims.
Brett Leatherman, FBI cyber director warned that North Korea relies on large-scale cryptocurrency theft to finance its prohibited weapons programme. Leatherman noted that the regime had stolen billions of dollars through cryptocurrency-related operations in recent years.
The FBI described FaceStealer as a highly effective social engineering scheme capable of deceiving even experienced technology professionals and security-conscious computer users.
The latest findings highlight the growing use of trusted communication platforms and familiar identities in cryptocurrency-related cybercrime. The FBI warning also draws attention to the risks facing open-source developers and professionals across the wider Web3 industry.
MOST READ | Drone strike triggers fire at Russia’s major Baltic Sea port
