← Latest briefing

Technology

FBI says North Korean hackers stole $400 million through fake video calls

US authorities say the FaceStealer scheme targeted more than 900 victims over 18 months, and US authorities moved to seize $1.2 billion tied to the Binance hack.

The short version

  • US authorities say North Korean state-sponsored hackers took over $400 million in cryptocurrency using fake video calls.[BBC News]
  • The FBI says more than 900 victims were affected by the FaceStealer scheme over the last 18 months.[BBC News]
  • US authorities reportedly seized servers linked to the scheme and sought to seize $1.2 billion tied to the Binance hack.[Deutsche Welle]
  • Binance reported a record $6.3 billion theft, which US law enforcement linked to North Korea-linked actors, and Pyongyang denies the claim.[BBC News]

Key facts

  • North Korean state-sponsored hackers took more than $400 million in cryptocurrency using fake video calls, according to US authorities.[BBC News · Deutsche Welle]
  • More than 900 victims fell for the FaceStealer scheme over the last 18 months, according to the FBI.[BBC News]
  • FBI cyber director Brett Leatherman said North Korea relies on large-scale cryptocurrency theft to fund its illicit weapons program.[BBC News]
  • US authorities seized servers linked to the scam and moved to seize $1.2 billion taken from Binance.[Deutsche Welle]
  • Binance reported that hackers stole a record $6.3 billion, which AP described as the biggest crypto heist on record.[BBC News · Deutsche Welle]
  • US law enforcement agencies attributed the Binance hack to North Korea-linked actors.[BBC News]

What remains uncertain

  • Pyongyang has denied involvement in the Binance hack, so the attribution to North Korea-linked actors remains disputed.[BBC News · Deutsche Welle]
  • The $400 million loss and 900-victim figures are FBI-reported, and the reporting does not show independent verification of them.[BBC News]
  • The reporting describes the $1.2 billion as a move to seize or restrain funds, and does not confirm that the seizure has been completed.[Deutsche Welle]

Sources

Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.