Published 36 minutes ago • loading... • Updated 19 minutes ago
North Korean hackers steal more than $400 million using video images, FBI says
The campaign used fake video calls and malware to steal identities and cryptocurrency from at least 900 targets, federal officials said.
On Thursday, the FBI reported that North Korean state-backed hackers stole more than $400 million in cryptocurrency over the past 18 months using surreptitiously recorded video images to target victims' contacts through the 'FaceStealer' campaign.
Hackers impersonate trusted contacts on imposter versions of Zoom, Microsoft Teams, and Google Meet, luring targets into video calls where they encounter mock technical errors requiring software updates that actually install malware.
The FBI noted that hackers often include multiple fake participants in Zoom and Teams sessions "to add pressure" on targets, and once malware infects a device, it steals cryptocurrency, passwords, and browser cookies to target further victims.
Pursuant to a federal warrant, the FBI seized over 900 webcam videos of FaceStealer victims and shut down the cloud-based infrastructure used in the scheme, though officials warn hackers may continue targeting users.
Beyond cryptocurrency investors, attackers also target open-source software programmers to tamper with projects. FBI Assistant Director Patrick Grandy of the Los Angeles Field Office warned the scheme "exploits our trust in ubiquitous video conference platforms and valued personal relationships.
The FBI WARNS about North Korean hackers who stole over $400 million in cryptocurrencies. They use fake video calls and AI to spread the attack to new victims through their contacts.