D3/100
Breach · high
FBI says North Korean hackers stole over $400 million using deepfake video calls
Tier D · Background noise – Good to know
Who’s exposed: Cryptocurrency holders targeted through deepfake video calls
Tier D because: Does not hit tech teams
Reach
Attack
Damage
Fix
Exploited in the wild
The Brief
- The FBI says North Korea-linked threat actors stole over $400 million in cryptocurrency.
- The theft was part of a social engineering scheme the FBI codenamed FaceStealer.
- The scheme used deepfake video calls.
Why it matters
Deepfake video calls can impersonate colleagues, partners or recruiters convincingly, so video alone should not be trusted to authorize transfers or access. Developers handling crypto or privileged access should verify identities through a separate channel.
The checklist behind the tier
Checklist · 1 of 10 yes
| No | Hits tech teams | Judgment: a deepfake social-engineering crypto theft targeting individuals, not software, devices or services developers or IT run. |
| No | Core infrastructure | Judgment: no flaw in or compromise of core software; the scheme is social engineering. |
| No | Popular tool | Judgment: no widely used framework, tool, platform, OS or package is involved. |
| Yes | Exploited in the wild | The Hacker News: FBI says North Korean hackers stole over $400 million in crypto using the scheme. |
| No | Public exploit | The Hacker News reports no published exploit code or proof-of-concept; the scheme is social engineering. |
| No | Remote, no login | The Hacker News describes a social engineering scheme via video calls, which requires victim interaction. |
| No | Full takeover | The Hacker News reports crypto theft via social engineering; no code execution, root or account takeover is mentioned. |
| No | Secrets exposed | The Hacker News reports cryptocurrency stolen; no credentials, keys, configs or source code exposure is mentioned. |
| No | Supply chain | The Hacker News reports a social engineering scheme; no compromised package, update or build pipeline is mentioned. |
| No | No fix yet | Not a software vulnerability; a social engineering scheme has no patch to ship. |
Source
FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls ↗ The Hacker News · 3h ago
First seen · 1 source · Full story page · How tiers are decided