North Korea’s New Office: Deepfake Zoom Hacks Crypto Pros

North Korea’s cyber kleptocrats have upgraded from typing “U S U R” to full-blown deepfake zoom calls. Because why settle for a dodgy .exe file when you can just mimic your friend’s face and ask them to “fix your audio”? It’s like a bad date who’s not into you but still wants to empty your crypto wallet. Charming!

“Don’t trust anyone on the internet. Also, your audio settings are fake.”

According to his post, victims get a Zoom call from a known contact, which is really a hijacked Telegram account manipulated by hackers. These deepfake influencers then pretend to exist using AI, all while muting themselves like they’re afraid of their own terrible comments.

This silence is the ultimate sales tactic. The next step is convincing you to install a “plugin” to “fix audio issues.” Spoiler: it’s malware dressed in a flannel shirt, just like your ex.

Once installed, hackers gain full access to your computer and proceed to spam every colleague you’ve ever ignored in Slack. It’s like a game of tag, but the virus always wins.

“Inform your colleagues and network immediately. Do not join any unverified Zoom/Teams calls,” Kuchař added. For clarity: if it’s not a family reunion, hit decline.

Cybersecurity sleuths at Huntress confirmed these shenanigans are orchestrated by TA444, a group that’s more organized than any North Korean drama. Think of them as the “Lazarus Group’s” idea of a flexible work schedule.

Although not Olympic-level hacking, North Korea’s already stolen $300 million using this exact playbook. Because crypto pros are apparently the only people who can’t tell a deepfake video call from a middle school TikTok filter.

MetaMask’s Taylor Monahan warned hackers are now doing pre-research on their victims by reading chat histories. Because no one’s crypto is safe from someone who’s already memorized what you had for breakfast.

The grand prize? Crypto developers, exchange staff, and CEOs. One THORchain exec had $1.3 million stolen through a MetaMask wallet, all without needing admin approval. It’s like a thief walking into your house and saying, “Squatters’ rights, baby.”

North Korea’s New Office: Deepfake Zoom Hacks Crypto Pros

Read More

2026-01-27 10:56