Science & Tech · Cybersecurity · 1 hr ago
FBI says North Korean hackers stole over $400 million in crypto
North Korean hackers stole more than $400 million in cryptocurrency over the past 18 months, the FBI says.
The scheme, which the FBI calls “FaceStealer,” uses secretly recorded images to target people through their contacts.
Hackers take over the social media and messaging accounts of genuine contacts, then use them to invite new targets to fake video calls.
During the call, a supposed technical problem prompts the target to click a link that infects their computer and accounts.
The FBI says it has seized more than 900 victim webcam videos linked to the activity.
The hackers are also beginning to use AI-made deepfake videos of prominent people in cryptocurrency and blockchain.
The FBI attributes the campaign to a North Korean hacking group called Sapphire Sleet, also known as UNC1069; it is separate from the group linked to a recent $6.3 billion cryptocurrency exchange hack.
The FBI said North Korean state-backed hackers stole more than $400 million in cryptocurrency over the past 18 months.
The hackers used a social engineering scheme called “FaceStealer” to infect targets’ computers and social media accounts.
They lured people into video calls through fake versions of meeting software and invitations from compromised contacts.
The FBI said it had identified and seized more than 900 victim webcam videos.
The FBI attributed the activity to a group known as Sapphire Sleet or UNC1069.
- Who
- North Korean state-backed hackers known as Sapphire Sleet or UNC1069.
- What
- They stole more than $400 million in cryptocurrency using a social engineering scheme.
- When
- Over the past 18 months, according to the FBI.
- Where
- Online, using video meeting software and social media accounts. The sources do not specify a geographic location.
- Why
- To steal cryptocurrency. The sources do not state a further motive.
This story does not have two clearly opposing sides.
North Korean hackers stole more than $400 million in cryptocurrency, the FBI said.
The FBI said it had identified and seized more than 900 victim webcam videos.
The FBI said the hackers had used the “FaceStealer” scheme and attributed the activity to Sapphire Sleet or UNC1069.
- Stolen cryptocurrency
- More than $400 million
- Duration
- Past 18 months
- Scheme
- FaceStealer
- Victim webcam videos
- More than 900 identified and seized
- Attributed group
- Sapphire Sleet or UNC1069