FBI Disrupts 'FaceStealer' Cryptocurrency Theft Scheme Linked to North Korean Hackers
The FBI has successfully disrupted infrastructure used by North Korean hackers in a global cryptocurrency theft scheme known as 'FaceStealer.' According to Jeremy Robertson, special agent in charge of Cyber and Counterintelligence at FBI Los Angeles, this sophisticated social engineering operation has resulted in over $400 million in thefts and the impersonation of more than 900 victims within the crypto and Web3 industries over the past 18 months. The scheme involves hackers impersonating individuals known to the targets, often by hijacking Telegram or LinkedIn accounts to establish legitimacy. Victims are then lured into fake Zoom or Microsoft Teams meetings, where their webcams are secretly recorded. During these meetings, the impersonator claims audio issues and prompts the victim to download a fake update, which is actually malware. This malware grants the hackers access to the victim's computer, cryptocurrency, and social media accounts, perpetuating the cycle of impersonation and theft.
