North Korean hackers have duplicated face ids by using fake versions of Zoom, Microsoft Teams, and Google Meet, the FBI says
State-sponsored hackers from North Korea have taken more than $400 million in cryptocurrency in under two years by using fake video calls to steal people’s identities, FBI officials say.
The North Korean hackers targeted individuals working in the cryptocurrency and web3 industries by using fake versions of Zoom, Microsoft Teams, and Google Meet. The FBI attributes this activity to the North Korean hacking group commonly referred to in the private sector as Sapphire Sleet, UNC1069, Stardust Chollima, APT38, and BlueNoroff.
Jeremy Robertson, the Special Agent in Charge of Cyber & Counterintelligence for the FBI field office, released a video explaining the plot on X. “When the meeting starts, you see the webcam video of the person who invited you, but they’re not actually there. You’re looking at a video of a prior victim,” Robertson said, adding that there may be multiple fake participants in the meeting to add pressure.
https://twitter.com/FBILosAngeles/status/2120999353112306095
The scheme is complex, and was described by the FBI this way:
1. Threat actors compromise and secretly record a victim’s webcam.
2. Threat actors hijack the victim’s communication accounts and message the victim’s contacts.
Have Questions? Get Answers!
Scroll to continue reading
3. Threat actors deliver a convincing fake video link to a new target.
4. Threat actors lure targets into realistic imposter video chats.
5. Threat actors impersonate the original victim with recorded webcam video and trick the target into self-infecting.
Click Here For The Original Source.
——————————————————–
