North Korean Hackers Make Off with Over $400 Million in Crypto via Deepfake Video Calls, FBI Warns
A brazen cyberheist has left law enforcement scrambling to understand the scope of a sophisticated attack carried out by North Korean hackers. The Federal Bureau of Investigation (FBI) has confirmed that the group used a combination of social engineering and advanced technology to dupe victims into divulging sensitive information, ultimately netting over $400 million in cryptocurrency.
The attackers’ modus operandi involves creating convincing deepfake video calls, which are essentially AI-generated simulations of real people. These fake conversations often involve a sense of urgency or false promise, designed to prompt the victim into handing over valuable data or clicking on malicious links. Once inside the target’s system, the hackers can then use their access to exploit other vulnerabilities and make off with sensitive information.
The victims in question are mostly high-net-worth individuals, business executives, and government officials who were tricked into participating in these fake video calls. The attackers used a range of tactics to gain their targets’ trust, including posing as bank representatives or law enforcement officers. Once the victim had divulged their login credentials or other sensitive information, the hackers could then use that data to access the target’s cryptocurrency wallets and make unauthorized transactions.
The use of deepfakes in this attack highlights the evolving sophistication of cybercrime. These AI-generated simulations are often nearly indistinguishable from real conversations, making it increasingly difficult for victims to recognize when they’re being duped. This technique also underscores the importance of staying vigilant in today’s digital landscape – even seemingly innocuous interactions can be a ruse.
The FBI warns that this attack is likely just one part of a larger campaign by North Korean hackers to exploit vulnerabilities in global financial systems. The agency advises individuals and organizations to remain cautious when receiving unsolicited calls or messages, especially those involving urgent requests for information. By staying informed and taking proactive measures to protect their digital assets, citizens can help prevent similar attacks from succeeding.
As we navigate the ever-changing threat landscape, it’s essential to remember that social engineering remains a potent tool in an attacker’s arsenal. To stay safe, individuals should always verify the identity of anyone requesting sensitive information via video call or email and be wary of urgent requests that seem too good (or bad) to be true. By exercising caution and staying informed, we can all play a role in thwarting these kinds of attacks and protecting our digital security.
Source: The Hacker News — 2026-11-13