Business · Singapore Bureau
North Korean hackers steal $400m using deepfake images: FBI
The U.S. Federal Bureau of Investigation has attributed a sophisticated cryptocurrency theft campaign to North Korean state-backed hackers, who used manipulated video images to deceive targets over an 18-month period.
LSN Singapore ·

North Korean-linked cybercriminals have siphoned more than $400 million in cryptocurrency through an elaborate fraud scheme involving digitally created or altered imagery, according to a Thursday statement from the FBI.
The hackers deployed deepfake technology and surreptitiously recorded images of individuals to build false identities, which were then weaponised to infiltrate the networks of cryptocurrency investors and financial professionals. By impersonating trusted contacts, the attackers gained access to digital wallets and facilitated unauthorized fund transfers across blockchain networks.
The campaign, conducted over approximately 18 months, represents one of the largest cryptocurrency heists attributed to state-sponsored North Korean actors. The technique underscores growing concerns among cybersecurity experts about the intersection of artificial intelligence-generated content and financial fraud, particularly in the digital asset sector where transactions are difficult to reverse.
The theft highlights vulnerabilities in how cryptocurrency investors authenticate contacts and verify identities during high-value transactions. Experts recommend implementing multi-factor authentication, video verification protocols, and enhanced due diligence when executing significant fund transfers.
The FBI's disclosure comes as North Korean hackers have intensified their focus on cryptocurrency theft to circumvent international sanctions and generate hard currency for the regime. Similar campaigns attributed to Pyongyang-backed groups have targeted cryptocurrency exchanges, blockchain platforms, and individual investors across multiple continents.