Google Mandiant: North Korean Hackers Use AI Deepfakes and Fake Zoom Meetings to Attack the Cryptocurrency Sector

Techub News reports, according to Decrypt, that Google's security team Mandiant has released a report stating that the North Korea-linked hacker group UNC1069 (also known as CryptoCore) is launching highly targeted attacks against cryptocurrency and fintech companies using AI-generated deepfake videos and fake Zoom meetings. The report shows that the group initiates fake Zoom meetings through hijacked Telegram accounts and uses deepfake videos of well-known cryptocurrency executives in these meetings to gain trust. They then induce victims to execute malicious commands under the pretext of "audio issues," ultimately deploying 7 different malware families to steal credentials, browser data, and session tokens. The primary targets of the attacks are cryptocurrency industry enterprises and individuals, including software companies, venture capital institutions, and their employees.