DOJ seized FaceStealer infrastructure: hackers record targets on fake video calls, use deepfakes of trusted contacts and push malware through a fake technical error, increasingly against open-source developers. More than $400M stolen in 18 months. Separately, US and private-sector efforts have frozen more than $2.7B from the Oct 29 Binance theft by TraderTraitor, with court authorization to seize or restrain over $1.2B.
What to do: Nov 13: Wide pickup (Reuters, NHK, Kyodo); no new facts.
🚨🇰🇵 FBI exposes North Korean hackers behind $400 million crypto theft scheme using secretly recorded webcam videos of 900+ victims The FBI has revealed a sophisticated campaign dubbed FaceStealer, in which North Korean state-sponsored hackers hijack Telegram,
North Korean hackers steal more than $400 million using video images, FBI says
「900人を超える被害者の顔の動画が保存され、1年半の間に4億ドル相当を超える暗号資産を盗んでいた」 オンライン会議を装って参加者の顔を録画し悪用するという北朝鮮のハッカーたちが使った“顔泥棒”と呼ばれる手口とは?
Why this score
Plan rubric with caps (verified sweep, Nov 12)