Malicious actors operating from North Korea have made off with upwards of $400 million in cryptocurrency assets using artificial intelligence, fraudulent video calls, and malicious software.
American officials believe these pilfered assets could have been channeled toward funding the administration of Kim Jong Un. As reported by Bild, the Department of Justice revealed the confiscation of a cloud storage hub purported to have been utilized by the operation’s orchestrators.
One of the principal methods involved fraudulent video conferences where attackers impersonated people whose accounts had previously been compromised.
During these sessions, the perpetrators relied on previously recorded video clips to simulate standard business interactions. The hackers then claimed that technical problems had arisen and instructed participants to follow a special link to resolve them, which installed malware on the victim’s computer without their knowledge.
The attackers also deployed deepfakes, which are fabricated videos generated using artificial intelligence. According to U.S. investigators, the perpetrators mimicked the physical appearance of well-known figures within the cryptocurrency sector in order to win over prospective targets. These tactics persuaded targets to take the steps needed to carry out the attacks and surrender digital assets.
Based on information from Bild, the FBI placed blame on North Korea in early November for orchestrating one of the biggest cyber onslaughts ever launched against the digital currency sector. The target was the Binance exchange, which allegedly lost $6.3 billion in digital assets.
U.S. law enforcement authorities are investigating the circumstances of the attacks. Officials are also trying to determine whether the suspects were involved in other cryptocurrency thefts. The U.S. Department of Justice continues to analyze seized cloud storage repositories linked to the operation.
Related reading