How hackers steal $400m through AI-powered fake video calls
North Korean hackers use AI to steal millions
North Korean hackers have stolen more than $400 million through a cybercrime operation involving fake identities and AI-generated video calls. The FBI says the hackers used a deceptive method to gain victims’ trust and steal their digital assets.
The American agency named the operation “FaceStealer” and said it had caused more than $400 million in losses over the past 18 months. The hackers mainly targeted people working in the cryptocurrency and Web3 industries.
The FBI said the cybercriminals used advanced social engineering techniques to trick even experienced technology users. Their method involved pretending to be trusted individuals and inviting victims to online video meetings.
How the ‘FaceStealer’ scam works
The hackers first pretend to be someone the victim knows or trusts. They then arrange a video call and use artificial intelligence (AI) to create fake videos that make their identities appear genuine.
During the meeting, the criminals introduce what looks like a technical problem. They ask the victim to click on a link or follow a prompt to fix the issue, but this action secretly installs harmful software on the victim’s device.
Once the malware is installed, hackers can gain access to personal information and communication accounts. They can also use victims’ contact lists and social media connections to impersonate them and target more people.
FBI links cryptocurrency theft to North Korea
The FBI said North Korean hackers have repeatedly targeted cryptocurrency businesses and individuals through deceptive online activities. The agency also accused North Korea-linked hackers of stealing billions of dollars in digital assets in recent years.
Earlier this month, the FBI accused a North Korean hacking group of stealing $6 billion from cryptocurrency platform Binance. North Korea has rejected the accusation, while Binance has said it is repaying customers who lost money in the incident.
Brett Leatherman, the FBI’s Cyber Branch Operations Director, said the North Korean government relies on money from large-scale cryptocurrency theft to support its weapons programme. He said the country had stolen billions of dollars through cybercrime activities in recent years.
FBI warns even experienced users can become victims
Patrick Grandy, assistant director at the FBI’s Los Angeles Field Office, warned that the FaceStealer operation could deceive even people with strong technical knowledge and security awareness. He said the criminals take advantage of people’s trust in video conferencing platforms and personal relationships.
“FaceStealer is a highly effective social engineering scheme capable of deceiving even the most experienced technical and security-conscious computer user,” Grandy said.
“It exploits our trust in ubiquitous video conference platforms and valued personal relationships. If you can’t imagine a scenario where you might fall prey to it, you are not thinking creatively enough,” Grandy said.
The FBI’s warning highlights how cybercriminals are using artificial intelligence to make online scams more convincing. Fake video calls and stolen identities are becoming serious threats to people and businesses handling digital money.
The FaceStealer case shows how AI technology can be misused to carry out financial crimes. Even a familiar face or voice on a video call may not always be genuine.
People should avoid clicking on unexpected links or following instructions from unknown callers. Verifying a person’s identity through another trusted method can help prevent such scams.
Also read: Cyberattack Epidemic: Why UK businesses lost $55 billion to hackers?
