North Korean hackers used fake video calls in $400m crypto hack, says FBI
More than 900 victims are thought to have fallen prey to the FaceStealer scheme in the last 18 months.
Noticia publicada originalmente por BBC News — World en bbc.co.uk (se abre en una pestaña nueva). Minuto 24 no es autor de este contenido.
Claves de la noticia
- Según las autoridades estadounidenses, hackers respaldados por Corea del Norte han robado más de 400 millones de dólares en criptomonedas mediante videollamadas falsas que suplantan identidades.
- El FBI denomina al esquema FaceStealer y afirma que más de 900 víctimas han caído en él durante los últimos 18 meses.
- Los atacantes invitan a sus objetivos desde cuentas falsas o secuestradas y simulan llamadas con grabaciones de personas conocidas, instalando malware al pedir arreglar el audio.
- El malware permite acceder a contactos y aplicaciones, ampliando el número de posibles víctimas, y los ciberdelincuentes graban las llamadas para extorsionar a nuevos objetivos.
- Las autoridades advierten que el esquema busca sobre todo a personas del sector de las criptomonedas y web3, en especial a desarrolladores de software de código abierto.
Contexto
Corea del Norte está sujeta a amplias sanciones internacionales, y Estados Unidos sostiene que el régimen financia su programa de armas con robos informáticos a empresas de criptomonedas. La noticia llega una semana después de que el intercambio Binance revelara un robo récord de 6.300 millones de dólares, atribuido por las autoridades estadounidenses a actores vinculados a Corea del Norte, algo que Pyongyang niega. Este contexto muestra que los ataques contra el sector cripto son una preocupación constante para los gobiernos. Para el lector, el caso es relevante porque demuestra que el engaño puede venir de conocidos aparentes y de plataformas de videoconferencia habituales, por lo que los profesionales del sector deben desconfiar de llamadas inesperadas y de enlaces para resolver problemas técnicos.
Resumen elaborado por Minuto 24 con ayuda de inteligencia artificial a partir de la noticia publicada por BBC News — World. Puede contener imprecisiones: ante cualquier duda, consulta la fuente original.
State-sponsored hackers from North Korea have taken more than $400 million in cryptocurrency by using fake video calls to steal people's identities, US authorities say.
More than 900 victims have fallen prey to the scheme, which the FBI refers to as FaceStealer, in the last 18 months, according to the bureau.
"The North Korean regime relies on proceeds from large-scale cryptocurrency theft to fund its illicit weapons program, stealing billions of dollars in recent years," says FBI cyber director Brett Leatherman.
This comes a week after the world's largest crypto exchange Binance revealed that hackers had used fake job interviews to steal a record $6.3bn (£4.7bn) from the company.
US law enforcement agencies attributed the Binance hack, thought to be the largest crypto hack to date, to North Korea-linked actors. Pyongyang has denied this claim.
Authorities say FaceStealer, the latest scheme, "aggressively targets" those who work in the cryptocurrency and web3 sectors, particularly those who are involved in the development and maintenance of open-source software.
According to the FBI and US Justice Department, FaceStealer hackers use fake or hijacked social media accounts to invite potential victims into video calls hosted over "imposter versions" of Zoom, Microsoft Teams, and Google Meet.
Next, the hackers play pre-recorded videos of previous victims the target is acquainted with to simulate a legitimate call – except that the audio would appear to malfunction.
A message then pops up on the target's screen, asking them to "fix" the audio by clicking on a link. This "fix" would eventually download malware onto the target's device, which allows hackers to access their contact lists and apps, widening their pool of potential victims.
Hackers would secretly record these calls and use the recordings as material to scam their new victims, according to the US authorities.
The FBI has described FaceStealer as "a highly effective social engineering scheme capable of deceiving even the most experienced technical and security conscious computer user".
"It exploits our trust in ubiquitous video conference platforms and valued personal relationships," Patrick Grandy, assistant director in charge of the bureau's Los Angeles field office, said in a statement on Thursday.
"If you can't imagine a scenario where you might fall prey to it, you are not thinking creatively enough."
