North Korean Hackers Exploit Fake Zoom Meetings to Target Crypto Holders
North Korean hacking groups have escalated attacks using spoofed Zoom and Teams meetings to steal cryptocurrencies and sensitive data. Cybersecurity firm Security Alliance reports these social engineering schemes begin with compromised Telegram accounts, where attackers impersonate trusted contacts to distribute malicious links disguised as video conferencing invites.
Victims who engage receive malware-laden 'updates' masquerading as Zoom fixes, compromising wallets, passwords, and proprietary data across all major operating systems. The attacks highlight growing sophistication in phishing tactics targeting crypto-native professionals.
Security experts urge immediate isolation of affected devices, credential resets, and network-wide alerts to contain breaches. The campaign reflects Pyongyang's continued reliance on cybercrime to fund operations amid international sanctions.
