FBI Attributes $400 Million Cryptocurrency Theft to North Korean Video Call Scam

State-backed cybercriminals from North Korea have stolen over $400 million in digital assets by employing fraudulent video calls for identity theft, according to United States officials. The Federal Bureau of Investigation reports that over 900 individuals have been targeted by this operation, known as FaceStealer, over the past year and a half. Brett Leatherman, the FBI cyber director, stated that the North Korean government depends on revenue from massive digital currency heists to finance its illegal weapons development, having taken billions of dollars in recent years. This announcement follows an incident a week prior in which Binance, the leading global cryptocurrency exchange, reported that attackers utilized counterfeit job interviews to siphon a record $6.3 billion, equivalent to £4.7 billion, from the platform. United States law enforcement linked the Binance breach, believed to be the biggest digital asset theft to date, to actors associated with North Korea, though Pyongyang has rejected the allegation. Investigators note that the FaceStealer campaign specifically focuses on professionals within the cryptocurrency and web3 industries, especially individuals engaged in building and supporting open-source software. According to the FBI and the Department of Justice, the perpetrators employ false or compromised social media profiles to draw targets into video conferences conducted through fraudulent editions of communication platforms such as Zoom, Microsoft Teams, and Google Meet. The operators then broadcast pre-recorded footage of acquaintances known to the target to mimic a genuine meeting, while pretending that the sound is not working properly. A notification subsequently appears on the victim's display, prompting them to resolve the audio issue through an external link, which actually installs malicious software on their computer, granting the intruders entry to contact directories and software applications to expand their network of targets. Furthermore, the perpetrators covertly record these sessions to generate material for defrauding additional individuals, as stated by American law enforcement. The FBI characterized FaceStealer as an extremely successful manipulation tactic capable of tricking even highly knowledgeable technology and security professionals. Patrick Grandy, the assistant director heading the bureau's Los Angeles field office, noted in a Thursday press release that the method preys on reliance upon common video conferencing tools and trusted personal connections, adding that failure to imagine becoming a victim reflects a lack of imagination.