Over the past 18 months, cybercriminals have conducted a large-scale campaign called "Face Thief," targeting employees and companies in the cryptocurrency industry, BNO News reported, citing the U.S. Federal Bureau of Investigation (FBI).
Attack mechanics via video calls
According to the FBI, hackers compromised user accounts and sent video meeting invitations, impersonating acquaintances or business partners. To make the deception convincing, the perpetrators used pre-recorded videos featuring real people. During these calls, victims were coerced into installing malware, which granted the criminals access to cryptocurrency wallets and internal company systems.
To implement this scheme, hackers secretly gained access to more than 900 webcam recordings, which were then used to impersonate other users.
Scale of the cyberattack
Context
U.S. authorities link the actions of these groups to North Korea, an East Asian nation with a population of approximately 26.4 million. The FBI, an agency founded in 1908 and reporting to the U.S. Department of Justice, is investigating the incident.
