The U.S. Justice Department said North Korean hackers stole more than $400 million in cryptocurrency over 18 months through a scheme the FBI calls “FaceStealer.” It announced the seizure of infrastructure behind the operation. According to the department, attackers used stolen accounts, secretly recorded webcam footage and AI deepfakes to gain trust on video calls, then offered a fake technical fix that installed malware.
The department said the hackers have increasingly targeted open-source developers, apparently to enable supply-chain attacks. Separately, it said it obtained court authorization to seize or restrain more than $1.2 billion of the roughly $6.4 billion stolen in the Binance hack. That sum is part of more than $2.7 billion frozen so far; efforts to trace and recover the funds are ongoing. The FBI attributed the Binance theft to a North Korean group, but North Korea denied involvement.
