The threat actors deploy fake or hijacked social media accounts to lure web3 professionals into video conferences hosted on fraudulent clones of Zoom, Microsoft Teams, and Google Meet. Once connected, the hackers display pre-recorded video of familiar contacts while feigning technical glitches to trick targets into installing malicious software. These sessions are also secretly recorded to harvest new footage for subsequent deception operations. The disclosure closely follows a separate incident where crypto exchange Binance lost $6.3 billion to North Korea-linked hackers using fraudulent job interviews, though Pyongyang denies involvement.
Key points
North Korea relies on organized, large-scale cryptocurrency thefts to secure funding for…: North Korea relies on organized, large-scale cryptocurrency thefts to secure funding for its state weapons programs.
Cybercriminals are actively weaponizing pre-recorded video and hijacked social accounts t…: Cybercriminals are actively weaponizing pre-recorded video and hijacked social accounts to engineer highly convincing meeting environments.
Recorded sessions are systematically recycled by attackers to generate synthetic collater…: Recorded sessions are systematically recycled by attackers to generate synthetic collateral for targeting the victim's broader professional network.
Sources checked by our analysis pipeline: 1
State-sponsored hackers from North Korea have taken more than $400 million in cryptocurrency by using fake video calls to steal people's identities, US authorities say.
More than 900 victims have fallen prey to the scheme, which the FBI refers to as FaceStealer, in the last 18 months, according to the bureau.
"The North Korean regime relies on proceeds from large-scale cryptocurrency theft to fund its illicit weapons program, stealing billions of dollars in recent years," says FBI cyber director Brett Leatherman.
This comes a week after the world's largest crypto exchange Binance revealed that hackers had used fake job interviews to steal a record $6.3bn (£4.7bn) from the company.
US law enforcement agencies attributed the Binance hack, thought to be the largest crypto hack to date, to North Korea-linked actors. Pyongyang has denied this claim.
Authorities say FaceStealer, the latest scheme, "aggressively targets" those who work in the cryptocurrency and web3 sectors, particularly those who are involved in the development and maintenance of open-source software.
According to the FBI and US Justice Department, FaceStealer hackers use fake or hijacked social…
Designed to optimize ergonomic comfort across varied hand sizes, the newly introduced peripheral lets users mechanically tailor the thumb interface rather than forcing them to adapt to a fixed shape. This mechanical customization is aimed at reducing physical strain during prolonged computer use. Available in three color choices, the hardware offers a budget-friendly option for desktop users seeking flexible input controls.
C++ engineers seeking cleaner coroutine syntax can avoid the friction of manually defining combined parameter types by utilizing dedicated helper functions. Introducing a streamlined method such as `start()` bundles critical inputs, including execution priority, directly into an awaitable operation. This design pattern reduces boilerplate overhead and ensures that standard asynchronous invocation remains intuitive for consumers of the class.
Roboticists face persistent challenges when mapping human movements directly onto artificial systems due to mismatched proportions, joint structures, and mechanical limits. To address this friction, NVIDIA has launched an open-source tool that processes standardized motion representations to calculate precise, hardware-safe trajectory profiles. This pipeline bridges the gap between biological demonstrations and real-world execution, simplifying downstream policy training across diverse mechanical platforms.