North Korean hackers using deepfakes to steal cryptocurrencies: the terrifying scam unmasked by the FBI

“If you don’t imagine how you could […] be a victim, it’s because you lack imagination. » This is how the deputy director of the FBI warned tech workers “the most experienced and most concerned about their security” on Thursday.

The American federal agency had just announced that it had uncovered a scam by North Korean hackers who stole more than 400 million dollars (362 million euros) in eighteen months from a cryptocurrency platform.

Their strategy? Using deepfakes during video conferences to gain the trust of open source software developers.

During the meeting, the hackers – who present themselves through AI in the guise of knowledge – simulate a technical problem and ask their interlocutor to click on a link to resolve the problem.

Malware enters the computer and the theft – of cryptocurrencies but also of contacts – can then begin.

The American Department of Justice also announced that it had authorized the freezing of 1.2 billion (1 billion euros) in assets stolen by North Korean actors during the hack of 6.3 billion dollars (5.7 billion euros) from the Binance platform at the end of October.

North Korea, one of the least connected countries in the world, is increasing cyberattacks to circumvent sanctions and finance its illegal weapons programs.

Cyber ​​espionage, data collection... Pyongyang reportedly has hacker units specializing in attacks against states and health organizations.

Machine-translated from French