W3BStation
Markets
BTC $96,420 +2.34% ETH $3,280 +1.82% SOL $185.40 -0.92% BNB $642.50 +0.45% XRP $2.18 +3.12% DOGE $0.082 -1.50% ADA $1.05 +0.80% AVAX $42.10 +1.15%
BTC $96,420 +2.34% ETH $3,280 +1.82% SOL $185.40 -0.92% BNB $642.50 +0.45% XRP $2.18 +3.12% DOGE $0.082 -1.50% ADA $1.05 +0.80% AVAX $42.10 +1.15%
11/13/2026

DOJ Says Deepfake Calls Helped North Korean Hackers Steal Over $400 Million

What happened: The Justice Department announced on November 12 that it had seized infrastructure supporting FaceStealer, a North Korean social-engineering campaign authorities say stole more than $400

DOJ Says Deepfake Calls Helped North Korean Hackers Steal Over $400 Million

What happened: The Justice Department announced on November 12 that it had seized infrastructure supporting FaceStealer, a North Korean social-engineering campaign authorities say stole more than $400 million in cryptocurrency over approximately 18 months. Attackers combined prerecorded webcam footage with AI-generated impersonations of trusted contacts during fake Zoom or Teams calls, then fabricated technical problems and directed victims to malicious repair links that installed malware. The FBI also seized more than 900 webcam recordings collected by the attackers, illustrating how material captured from victims could support subsequent impersonation attempts.

Why it matters: The reported mechanism makes a familiar face an unreliable basis for approving a software installation: the apparent contact and the supposed technical fault were both elements of the deception. For crypto businesses, the practical implication is to verify unexpected installation requests through a separate, established channel, particularly when a call introduces software capable of reaching sensitive systems. The infrastructure seizure represents a disruption, but the supplied reporting does not establish that the stolen funds were recovered or that every participant in the campaign was identified.

Source: Decrypt.