International
The Morning Dev

Only the news worth knowing

‹
 
D3/100

Breach · high

FBI says North Korean hackers stole over $400 million using deepfake video calls

Tier D · Background noise – Good to know

Who’s exposed: Cryptocurrency holders targeted through deepfake video calls

Tier D because: Does not hit tech teams

Reach

Attack

Damage

Fix

Exploited in the wild

The Brief

  • The FBI says North Korea-linked threat actors stole over $400 million in cryptocurrency.
  • The theft was part of a social engineering scheme the FBI codenamed FaceStealer.
  • The scheme used deepfake video calls.

Why it matters

Deepfake video calls can impersonate colleagues, partners or recruiters convincingly, so video alone should not be trusted to authorize transfers or access. Developers handling crypto or privileged access should verify identities through a separate channel.

The checklist behind the tier

Checklist · 1 of 10 yes
NoHits tech teamsJudgment: a deepfake social-engineering crypto theft targeting individuals, not software, devices or services developers or IT run.
NoCore infrastructureJudgment: no flaw in or compromise of core software; the scheme is social engineering.
NoPopular toolJudgment: no widely used framework, tool, platform, OS or package is involved.
YesExploited in the wildThe Hacker News: FBI says North Korean hackers stole over $400 million in crypto using the scheme.
NoPublic exploitThe Hacker News reports no published exploit code or proof-of-concept; the scheme is social engineering.
NoRemote, no loginThe Hacker News describes a social engineering scheme via video calls, which requires victim interaction.
NoFull takeoverThe Hacker News reports crypto theft via social engineering; no code execution, root or account takeover is mentioned.
NoSecrets exposedThe Hacker News reports cryptocurrency stolen; no credentials, keys, configs or source code exposure is mentioned.
NoSupply chainThe Hacker News reports a social engineering scheme; no compromised package, update or build pipeline is mentioned.
NoNo fix yetNot a software vulnerability; a social engineering scheme has no patch to ship.

Source

FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls ↗ The Hacker News · 3h ago

First seen · 1 source · Full story page · How tiers are decided