North Korean hackers have, according to the FBI, managed to steal about 400 million dollars in crypto over a year and a half using cunning deepfake videos, more than 350 million euros. The American law enforcement agency found more than 900 deepfake videos of victims, which were used to deceive new people.
The hackers pretended to be an acquaintance of their victim. They approached them with a message to catch up via a video call or to discuss a collaboration. Victims did not realize that the video images of this person were created with AI.
The video call also did not take place via well-known apps like Zoom, Teams, or Meets, but through indistinguishable copies of those, running on North Korean servers. During the conversations, victims received a message that there was something wrong with their connection, which they could supposedly fix via a link that was sent.
Months of patience
Whoever clicked on the link was digitally handed over to the hackers. They gained access to crypto accounts, email data, and chat messages. Recordings were also made via the webcam, to approach acquaintances of the victim with their face.
Because the hackers also had communication in their hands, they could easily impersonate the victim in messages, especially if they had also taken over their accounts on LinkedIn, Telegram, Slack, or Discord.
According to researchers, the hackers worked particularly cleverly. In some cases, the hackers had been watching a victim for at least a year before striking. The hackers were especially interested in major players in the crypto world.
Dangerous
The FBI has named this practice FaceStealer, because the faces of victims were misused. "This was a highly effective method that even the most experienced and security-conscious computer users fell for," the FBI warns about the trick. "If you cannot imagine a scenario in which this happens to you, then you are not thinking creatively enough."
The FBI provides tips on its website for people who think they have become victims. They are advised to quickly transfer cryptocurrency to a new account, log out everywhere, and change passwords.
Along with the message about FaceStealer, the FBI also gave an update about the enormous hack in which 6 billion dollars were stolen from the crypto platform Binance last month. The investigative service says it has now seized 1.2 billion dollars of that.
Here too, it is said to involve North Korean hackers. The regime of that country would use the crypto fortune to pay for its weapons program.