← Voltar ao feed

US seizes North Korean hacking infrastructure and $1.2 billion in Binance theft linked to FaceStealer social engineering

1 fonte(s) · 1 atualização(ões) · publicado 12/11/2026 21:32 · coletado há 1 hora

The US Justice Department announced coordinated actions against North Korean hacking groups responsible for stealing billions in cryptocurrency, including the seizure of cloud infrastructure behind the FaceStealer social engineering scheme and the court-authorized seizure of over $1.2 billion stolen from Binance. The FBI attributes the theft of more than $6 billion in virtual assets from Binance to the North Korean military hacking group TraderTraitor and has frozen about $2.7 billion of the stolen funds. The FaceStealer campaign uses sophisticated impersonation via fake Zoom and Microsoft Teams interfaces to hijack accounts on platforms like Telegram, LinkedIn, Slack, and Discord, exploiting victims through a library of over 900 secretly recorded webcam videos. This ongoing campaign has drained over $400 million from cryptocurrency and Web3 sectors in the past 18 months. The FBI alert and seizure highlight the complexity and scale of North Korea's evolving tactics in cryptocurrency theft and cybercrime funding.

Linha do tempo

  1. cyberscoop.com ↗ · pub. 12/11/2026 21:32 · coletado 12/11 22:00 primeiro registro

    US seizes North Korean hacking infrastructure and $1.2 billion in Binance theft linked to FaceStealer social engineering

    ler a análise desta fonte

    The US Justice Department announced coordinated actions against North Korean hacking groups responsible for stealing billions in cryptocurrency, including the seizure of cloud infrastructure behind the FaceStealer social engineering scheme and the court-authorized seizure of over $1.2 billion stolen from Binance. The FBI attributes the theft of more than $6 billion in virtual assets from Binance to the North Korean military hacking group TraderTraitor and has frozen about $2.7 billion of the stolen funds. The FaceStealer campaign uses sophisticated impersonation via fake Zoom and Microsoft Teams interfaces to hijack accounts on platforms like Telegram, LinkedIn, Slack, and Discord, exploiting victims through a library of over 900 secretly recorded webcam videos. This ongoing campaign has drained over $400 million from cryptocurrency and Web3 sectors in the past 18 months. The FBI alert and seizure highlight the complexity and scale of North Korea's evolving tactics in cryptocurrency theft and cybercrime funding.