FBI attributes $400M cryptocurrency theft to North Korean deepfake video social engineering campaign FaceStealer
The FBI has linked North Korean threat actors, specifically the BlueNoroff group, to a sophisticated social engineering campaign called FaceStealer, which has stolen over $400 million in cryptocurrency in the past 18 months. This campaign uses deepfake and prerecorded videos of trusted contacts during fraudulent video meetings to deceive targets, primarily individuals in the cryptocurrency and Web3 sectors. Victims are tricked into executing malware disguised as technical fixes, enabling attackers to steal cryptocurrency and infiltrate further systems. The attackers exploit compromised social media and communication accounts, leveraging generative AI techniques to enhance deepfake authenticity, which escalate their targeting of high-value individuals such as CEOs, founders, and developers. The FBI has seized more than 900 victim webcam videos, and the U.S. Department of Justice has also recovered over $1.2 billion related to North Korean cryptocurrency thefts, which fund illicit weapons programs. Additionally, related campaigns including Contagious Interview utilize trojanized coding tests and fake recruiter personas to deploy malware on developers' devices, contributing to supply chain threats.
Linha do tempo
-
FBI attributes $400M cryptocurrency theft to North Korean deepfake video social engineering campaign FaceStealer
ler a análise desta fonte ocultar
The FBI has linked North Korean threat actors, specifically the BlueNoroff group, to a sophisticated social engineering campaign called FaceStealer, which has stolen over $400 million in cryptocurrency in the past 18 months. This campaign uses deepfake and prerecorded videos of trusted contacts during fraudulent video meetings to deceive targets, primarily individuals in the cryptocurrency and Web3 sectors. Victims are tricked into executing malware disguised as technical fixes, enabling attackers to steal cryptocurrency and infiltrate further systems. The attackers exploit compromised social media and communication accounts, leveraging generative AI techniques to enhance deepfake authenticity, which escalate their targeting of high-value individuals such as CEOs, founders, and developers. The FBI has seized more than 900 victim webcam videos, and the U.S. Department of Justice has also recovered over $1.2 billion related to North Korean cryptocurrency thefts, which fund illicit weapons programs. Additionally, related campaigns including Contagious Interview utilize trojanized coding tests and fake recruiter personas to deploy malware on developers' devices, contributing to supply chain threats.