Published 2 days ago • loading... • Updated 4 hours ago
North Korean hackers steal more than $400 million using video images, FBI says
The FBI says the hackers used fake video meetings and deepfakes to steal credentials and record more than 900 victim webcam videos.
On Thursday, the FBI reported that North Korean state-backed hackers stole more than $400 million in cryptocurrency over the past 18 months using surreptitiously recorded video images to target victims' contacts through the 'FaceStealer' campaign.
Hackers impersonate trusted contacts on imposter versions of Zoom, Microsoft Teams, and Google Meet, luring targets into video calls where they encounter mock technical errors requiring software updates that actually install malware.
The FBI noted that hackers often include multiple fake participants in Zoom and Teams sessions "to add pressure" on targets, and once malware infects a device, it steals cryptocurrency, passwords, and browser cookies to target further victims.
Pursuant to a federal warrant, the FBI seized over 900 webcam videos of FaceStealer victims and shut down the cloud-based infrastructure used in the scheme, though officials warn hackers may continue targeting users.
Beyond cryptocurrency investors, attackers also target open-source software programmers to tamper with projects. FBI Assistant Director Patrick Grandy of the Los Angeles Field Office warned the scheme "exploits our trust in ubiquitous video conference platforms and valued personal relationships.
North Korean hackers tricked hundreds of people – with fake video calls.
Then they stole four billion kronor.
“They exploit our trust in video platforms,” said the FBI’s Patrick Grandy in a statement.