Hacking News
North Korean hackers stole $400M via FaceStealer scheme, DOJ seizes infrastructure
The U.S. Department of Justice announced that North Korean hackers operating the "FaceStealer" scheme stole more than $400 million in cryptocurrency over an 18‑month period. The FBI described the operation as using prerecorded video calls and deep‑fake footage of trusted contacts to trick victims into installing malware and draining wallets. DOJ agents have seized the infrastructure used for the scheme, including over 900 webcam recordings obtained under a federal warrant. The seizure coincided with ongoing actions against funds linked to the October 29 Binance hack, of which the DOJ can restrain over $1.2 billion and has frozen more than $2.7 billion. The investigation also linked the actors to known North Korean groups Sapphire Sleet, BlueNoroff and APT38.