Security Firm: North Korean Hackers' "Fake Zoom" Software Attack Has Become a Daily Threat, Stealing Over $300 Million in Assets

BlockBeats News, December 15th, Security Alliance, a nonprofit cybersecurity organization, warned that they are currently detecting multiple scam attempts initiated by North Korean hackers every day, and these attacks use a fake Zoom meeting to lure victims.

The scam involves enticing victims to download malware during a "fake Zoom call," thereby stealing sensitive information including passwords and private keys. Security researcher Taylor Monahan warned that this tactic has siphoned off over $300 million in assets from users.

The scam typically starts with a message from a Telegram account, often belonging to someone the victim "knows." Due to the familiar identity, the victim lowers their guard. Subsequently, the conversation naturally transitions to an invitation to "catch up via Zoom." Once the call begins, the hacker pretends to encounter audio issues and sends a supposed "patch file." When the victim opens this file, their device is infected with malware. The hacker then ends this fake call citing "Let's reschedule for another day."