Skip to main content
See every side of every news story
Published • loading... • Updated

North Korean hackers steal more than $400 million using video images, FBI says

The FBI says the hackers used fake video meetings and deepfakes to steal credentials and record more than 900 victim webcam videos.

  • On Thursday, the FBI reported that North Korean state-backed hackers stole more than $400 million in cryptocurrency over the past 18 months using surreptitiously recorded video images to target victims' contacts through the 'FaceStealer' campaign.
  • Hackers impersonate trusted contacts on imposter versions of Zoom, Microsoft Teams, and Google Meet, luring targets into video calls where they encounter mock technical errors requiring software updates that actually install malware.
  • The FBI noted that hackers often include multiple fake participants in Zoom and Teams sessions "to add pressure" on targets, and once malware infects a device, it steals cryptocurrency, passwords, and browser cookies to target further victims.
  • Pursuant to a federal warrant, the FBI seized over 900 webcam videos of FaceStealer victims and shut down the cloud-based infrastructure used in the scheme, though officials warn hackers may continue targeting users.
  • Beyond cryptocurrency investors, attackers also target open-source software programmers to tamper with projects. FBI Assistant Director Patrick Grandy of the Los Angeles Field Office warned the scheme "exploits our trust in ubiquitous video conference platforms and valued personal relationships.
Insights by Ground AI

168 Articles

Lean Right

North Korean hackers tricked hundreds of people – with fake video calls. Then they stole four billion kronor. “They exploit our trust in video platforms,” said the FBI’s Patrick Grandy in a statement.

·Stockholm, Sweden
Read Full Article
Lean Right

"If you can't imagine a situation where you yourself could be a victim of it, you're not thinking creatively enough."

·Borås, Sweden
Read Full Article
Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 40% of the sources are Center
40% Center

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

Reuters broke the news in London, United Kingdom on Thursday, November 12, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal