North Korean Hackers Steal $300M in Crypto via Fake Zoom Calls

North Korean hackers have stolen over $300 million from crypto users by luring them into fake Zoom calls, deploying malware to steal private keys and passwords. Victims are urged to secure their assets and accounts immediately.

North Korean hackers have orchestrated a sophisticated phishing campaign targeting cryptocurrency users through fake Zoom and Microsoft Teams meetings. The attacks often begin with a Telegram message from an account impersonating a trusted contact, leading to an invitation for a video call. During these calls, hackers use real video recordings to appear legitimate and simulate technical issues, prompting victims to download a "patch" or update that is actually malware. This malware grants remote access to the victim's device, allowing hackers to steal private keys, passwords, and drain crypto wallets. Over $300 million has been stolen through these scams, with attackers also taking over Telegram accounts to target further victims. Security experts advise immediate action for those affected: disconnect from the internet, transfer assets to new wallets, change all passwords, enable two-factor authentication, and perform a full memory wipe on compromised devices. The campaign highlights the growing risks in digital communications and the importance of vigilance and strong security practices in the crypto sector.