North Korean hackers used fake video calls in $400m crypto hack, says FBI - BBC
State-sponsored hackers from North Korea have stolen more than $400 million in cryptocurrency using fake video calls to impersonate victims' contacts, according to the FBI.
More than 900 victims have fallen prey to the scheme, which the FBI refers to as FaceStealer, in the last 18 months. The hackers specifically target those working in cryptocurrency and web3 sectors, particularly those involved in open-source software development.
Impersonation Tactics
According to authorities, FaceStealer hackers use fake or hijacked social media accounts to invite victims into video calls on imposter versions of Zoom, Microsoft Teams, and Google Meet. They play pre-recorded videos of the target's acquaintances to simulate legitimate calls, with intentional audio malfunctions prompting victims to click malicious links.
The North Korean regime relies on proceeds from large-scale cryptocurrency theft to fund its illicit weapons program, stealing billions of dollars in recent years.
Exploiting Trust
The FBI has described FaceStealer as "a highly effective social engineering scheme capable of deceiving even the most experienced technical and security conscious computer user." Hackers secretly record these calls to use as material for subsequent scams, expanding their victim pool.
Related
