North Korea’s Crypto Hacks Hit Zoom Users and Its Own Bank

BlueNoroff hackers use fake Zoom calls to drain crypto wallets, as another North Korean group is caught hacking its own central bank.

North Korean hackers have found a new way into crypto wallets, and it starts with a video call. 

Cybersecurity firm JUMPSEC uncovered a phishing operation run by BlueNoroff, a North Korea-linked hacking group. The scheme lures crypto professionals into fake Zoom and Microsoft Teams meetings. 

The attackers hijack Telegram accounts belonging to people victims already trust, then send meeting invites through those accounts. Once inside the fake call, victims are asked to turn on their webcam, unaware the entire setup is staged. 

JUMPSEC says the group accidentally exposed its own JavaScript source code. That mistake gave researchers a rare look at how the scheme works.

How The Fake Meeting Scam Works

According to JUMPSEC, the attack begins the moment a trusted Telegram contact sends a meeting link. That link leads to a lookalike domain built to mimic Zoom or Teams. 

… Continue reading the full article at the original source below.