FBI Links North Korean Hackers to $400 Million Crypto Theft via Deceptive Video Calls
The Federal Bureau of Investigation (FBI) has issued a stern warning regarding a sophisticated cyber-espionage campaign orchestrated by North Korean hackers. According to federal authorities, these threat actors have successfully siphoned approximately $400 million in cryptocurrency by utilizing deceptive tactics, most notably the use of fake video calls to compromise their targets. This operation, often referred to as the ‘FaceStealer’ scheme, has reportedly claimed over 900 victims within the last 18 months.
The modus operandi involves hackers posing as legitimate recruiters, potential business partners, or high-profile industry contacts. By initiating video calls—often using deepfake technology or pre-recorded footage—the attackers establish a false sense of trust with their targets. Once rapport is built, they encourage the victims to download malicious software or interact with compromised platforms, which then grants the hackers access to private digital wallets and sensitive financial credentials.
Cybersecurity experts note that this campaign highlights the evolving nature of social engineering. By moving beyond simple phishing emails and into the realm of real-time interactive deception, North Korean state-sponsored groups are significantly increasing their success rates. The stolen funds are believed to be funneled back into North Korea to bypass international sanctions and support the regime’s illicit weapons programs.
The FBI is urging individuals and organizations, particularly those involved in the cryptocurrency sector, to exercise extreme caution. Security recommendations include verifying the identity of anyone requesting software installations via video calls, utilizing multi-factor authentication, and maintaining cold storage for significant digital assets. As the investigation continues, authorities are working with international partners to track the flow of the stolen assets and dismantle the infrastructure supporting these malicious activities.
Sources: BBC World