Threat Pulse 62High
DOJ: FaceStealer North Korean scheme stole $400M+ using 900+ recorded webcam videos; over $2.7B of Binance heist funds frozen
Severity 7ActiveconfirmedCryptoAI and software supply chain

DOJ seized FaceStealer infrastructure: hackers record targets on fake video calls, use deepfakes of trusted contacts and push malware through a fake technical error, increasingly against open-source developers. More than $400M stolen in 18 months. Separately, US and private-sector efforts have frozen more than $2.7B from the Oct 29 Binance theft by TraderTraitor, with court authorization to seize or restrain over $1.2B.

What to do: Nov 13: Wide pickup (Reuters, NHK, Kyodo); no new facts.

· 40 h ago · justice.gov
On X
@DarkWebInformerverifiedNov 12, 21:53 UTC

🚨🇰🇵 FBI exposes North Korean hackers behind $400 million crypto theft scheme using secretly recorded webcam videos of 900+ victims The FBI has revealed a sophisticated campaign dubbed FaceStealer, in which North Korean state-sponsored hackers hijack Telegram,

Open on X
@ReutersverifiedNov 13, 00:30 UTC

North Korean hackers steal more than $400 million using video images, FBI says

Open on X
@nhk_newsverifiedNov 13, 09:32 UTC

「900人を超える被害者の顔の動画が保存され、1年半の間に4億ドル相当を超える暗号資産を盗んでいた」 オンライン会議を装って参加者の顔を録画し悪用するという北朝鮮のハッカーたちが使った“顔泥棒”と呼ばれる手口とは?

Open on X
Why this score

Plan rubric with caps (verified sweep, Nov 12)

Updated Nov 14, 03:49 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.