<\/p>\n
North Korean threat actors are once again targeting cryptocurrency developers and professionals using live video calls on Zoom to dupe them into installing malware.<\/p>\n
<\/p>\n
Hackers based in North Korea are using compromised Telegram accounts and deep fake AI videos to impersonate known contacts and deliver malicious payloads, according to BTC Prague co-founder Martin Kucha\u0159.<\/p>\n
\u201cA high-level hacking campaign is currently targeting Bitcoin and crypto users. I have been personally affected via a compromised Telegram account,\u201d Kucha\u0159 wrote on X<\/a>.<\/p>\n According to his post, victims get a call from a known contact, which is originally a hijacked Telegram account taken over by attackers. Through these live calls, bad actors pretend to be the victim\u2019s friend using deep fake technology, all while staying muted.<\/p>\n <\/p>\n This silence acts as the hook, as the next stage of the attack involves convincing the victim to install a plugin or a file that claims to fix audio issues. In reality, the file houses malware, often a Remote Access Trojan, that grants attackers full system access once executed.<\/p>\n As soon as access is gained, attackers are able to view all Telegram contacts and reuse the compromised account to reach out to the next victim in the same manner.<\/p>\n \u201cInform your colleagues and network immediately. Do not join any unverified Zoom\/Teams calls,\u201d Kucha\u0159 added.<\/p>\n