The FBI says North Korean state-backed hackers have stolen more than $400 million in cryptocurrency over the past 18 months, using a social-engineering scheme dubbed “FaceStealer.” The approach reportedly targets people in the cryptocurrency industry by posing as trusted video-conference users and combining computer intrusions with deceptive video or recorded images.
According to the FBI, the scheme involves imposter versions of video conference platforms and secretly obtained web camera footage, which are then used to pressure victims into taking actions that help deliver malware. Coverage also notes that the deception is tied to convincing video interactions that are used to reach a wider network through victims’ contacts.
One outlet adds additional context about the broader government response, stating that the DOJ is moving to seize $1.2 billion connected to the Binance hack. While all sources focus on the same FBI-described theft and method, they differ mainly in how they explain the video deception—such as “recorded images” or “deepfakes”—and whether they foreground related enforcement actions.
