The FBI disrupted the cloud infrastructure of the FaceStealer scheme, attributed to North Korean hackers, which enabled more than $400 million in cryptocurrency theft over 18 months. Attackers hijack legitimate messaging accounts, arrange fake meetings and use webcam recordings from over 900 victims to impersonate their contacts. The new victim’s webcam is activated as soon as they join the fraudulent meeting, after which their footage can be used to approach another target. Scripts or terminal code presented as technical fixes install malware capable of stealing data, cryptocurrency and access to accounts. The FBI recommends confirming every invitation through another channel and never running code presented as a video-conferencing update.
Source: Read the original article
