FBI Seizes $1.2 Billion in Binance Crypto Tied to North Korea
United States
Dado Ruvic/Reuters
Source Analysis
What Happened
What Happened
Where Sources Disagree
- Hacking Group Attribution: Most sources attribute the Binance cryptocurrency theft to the hacking group TraderTraitor. In contrast, other reporting identifies the perpetrators as Sapphire Sleet, an entity associated with multiple aliases including APT38 and BlueNoroff.
- FaceStealer Scam Mechanics: Some reports describe the FaceStealer scheme broadly as a combination of hijacked messaging apps and deepfake videos. In contrast, other sources provide more specific technical details, identifying the use of fake Zoom meetings and a 'you're on mute' social engineering vector to install malware.
Timeline
November 12, 2026
Forfeiture legal process expected: Officials said the U.S. government typically will file a claim of forfeiture with a judge, who will then determine who has legitimate claims to the recovered funds.
November 12, 2026
FaceStealer linked to DPRK: Also reported on Thursday, the FBI blamed North Korea for a separate social‑engineering scheme called FaceStealer that has amassed about $400 million over the last 18 months; the scheme involved hijacking messaging apps and recording deepfake videos.
November 12, 2026
FBI seizes $1.2 billion: The FBI announced it had seized more than $1.2 billion of cryptocurrency reported stolen from Binance, and the Justice Department obtained court authorization to seize or restrain over $1.2 billion of the stolen assets while U.S. government and private-sector partners have frozen more than $2.7 billion.
Summary by Ground AI
Sources
See All 148A varied selection of sources chosen by Ground to reflect the diversity of this story’s coverage.
Most Written About
The stories getting the most coverage from the last 24 hours
Source Analysis
Timeline
November 12, 2026
Forfeiture legal process expected: Officials said the U.S. government typically will file a claim of forfeiture with a judge, who will then determine who has legitimate claims to the recovered funds.
November 12, 2026
FaceStealer linked to DPRK: Also reported on Thursday, the FBI blamed North Korea for a separate social‑engineering scheme called FaceStealer that has amassed about $400 million over the last 18 months; the scheme involved hijacking messaging apps and recording deepfake videos.
November 12, 2026
FBI seizes $1.2 billion: The FBI announced it had seized more than $1.2 billion of cryptocurrency reported stolen from Binance, and the Justice Department obtained court authorization to seize or restrain over $1.2 billion of the stolen assets while U.S. government and private-sector partners have frozen more than $2.7 billion.
