North Korean state-backed hackers have stolen more than $400 million in cryptocurrency through fake video calls, targeting over 900 victims in the past 18 months, according to the FBI.
The scheme, dubbed FaceStealer, targets people working in the cryptocurrency and Web3 sectors, particularly open-source software developers.
Hackers use fake or hijacked social media accounts to invite victims to video calls through fraudulent versions of Zoom, Microsoft Teams and Google Meet.
During the calls, they play prerecorded videos of people known to the victims before prompting them to click links to fix supposed audio problems. The links install malware, allowing hackers to access contacts and applications on victims' devices.
The FBI said hackers also secretly recorded the calls and reused the footage to deceive more victims.
FBI cyber director Brett Leatherman said North Korea relied on cryptocurrency theft to finance its illicit weapons programme.
The warning comes a week after Binance disclosed a $6.3 billion cryptocurrency theft, which US authorities attributed to North Korean-linked hackers. Pyongyang has denied the allegation.
Source: BBC
-AH