FBI warns active $400M crypto scam targets your friends by replacing your face in videos
The FBI warned that North Korean hackers use stolen webcam recordings to impersonate crypto workers in fake video meetings and target their contacts. Attackers hijack accounts on services such as Telegram, LinkedIn, Slack and Discord, then send tailored meeting invitations and links to counterfeit Zoom or Teams sessions. Recorded footage can make prior victims appear live, while attackers may also use deepfakes. Fake troubleshooting prompts induce targets to install malware or run scripts, enabling theft of crypto and account credentials as well as further webcam recording. The FBI said the scheme caused more than $400 million in cryptocurrency theft over 18 months and that it seized over 900 victim videos. It recommends verifying invitations through another channel, using official meeting apps, avoiding untrusted scripts and securing crypto and accounts from an unaffected device if compromised.
