North Korean state-linked hackers are deploying AI-generated deepfake videos in sophisticated phishing attacks that have pilfered over $2 billion from the cryptocurrency industry in 2025 alone. A new report from Google’s Mandiant security team details how threat actors are exploiting trust in routine digital communications—like video calls and calendar invites—to execute highly targeted intrusions, signaling a dangerous evolution in cybercrime where digital identity itself has become the primary vulnerability.
about North Korean Hackers Use AI Deepfakes to Steal $2B in Crypto
News from PRK
Generated 1 posts last week North Korean Hackers Use AI Deepfakes in $17B Crypto Scam
State-sponsored hackers from North Korea are deploying AI-generated deepfake video calls in a sophisticated social engineering campaign targeting cryptocurrency professionals, a scheme contributing to record crypto losses estimated at $17 billion in 2025. The attacks, attributed to the Lazarus subgroup BlueNoroff, involve staged Zoom meetings where attackers impersonate trusted contacts to deliver macOS malware disguised as audio fixes. Security experts warn that visual media can no longer be considered reliable proof of identity in high-stakes digital finance, signaling a dangerous new frontier in cyber-enabled financial crime.
about North Korean Hackers Use AI Deepfakes in $17B Crypto ScamCrypto Losses Hit $4B in 2025 as Scams and Centralized Attacks Surge
Cryptocurrency scams and hacks drained over $4 billion from users and platforms in 2025, marking a 34% increase from the previous year. The surge was driven by a clear shift toward targeted social engineering and attacks on centralized players, with scams alone rising far faster than technical exploits, according to data from blockchain security firm PeckShield.
about Crypto Losses Hit $4B in 2025 as Scams and Centralized Attacks SurgeTruebit Protocol Loses $26.5M in Major DeFi Hack
The Truebit Protocol has been struck by a devastating smart contract exploit, resulting in the loss of approximately $26.5 million in Ethereum (ETH) and the near-total collapse of its native TRU token. This incident, flagged by blockchain security firm PeckShield, marks the first major DeFi hack of 2026 and underscores the persistent vulnerabilities in decentralized finance systems, following a record-breaking year for crypto theft in 2025.
about Truebit Protocol Loses $26.5M in Major DeFi HackCrypto Hacks Hit Record $2.72B in 2025 Despite Market Slump
The cryptocurrency industry suffered its most devastating year for security breaches in 2025, with total hack losses reaching a staggering $2.72 billion according to data from TRM Labs. This figure surpasses the previous record set in 2024, a particularly alarming development given the year’s depressed market conditions. The historic $1.5 billion breach of exchange Bybit in February, attributed to North Korean actors, set a grim tone for a year marked by increasingly sophisticated and professionalized attacks on both centralized exchanges and decentralized finance (DeFi) protocols worldwide.
about Crypto Hacks Hit Record $2.72B in 2025 Despite Market SlumpCrypto Whale Loses $38M in Multisig Wallet Exploit
A cryptocurrency investor has suffered a devastating $38 million loss after an attacker compromised a multisig wallet, draining its funds and retaining control of a leveraged DeFi position. This breach exposes critical failures in wallet setup and private key security, highlighting how attackers are increasingly bypassing technical safeguards to exploit human vulnerabilities in the crypto ecosystem.
about Crypto Whale Loses $38M in Multisig Wallet ExploitCrypto Theft Hits $3.4B in 2025, North Korea Steals $2B
The cryptocurrency industry faced one of its most devastating years for criminal losses in 2025, with over $3.4 billion stolen between January and early December according to blockchain analytics firm Chainalysis. This staggering total, driven by a record $2.02 billion haul by North Korean state-sponsored hackers, signals a dangerous new era of concentrated, geopolitically motivated attacks that are reshaping the security landscape for Bitcoin (BTC), Ethereum (ETH), and major stablecoins like USDT and USDC.
about Crypto Theft Hits $3.4B in 2025, North Korea Steals $2BNorth Korean Hackers Steal $300M via Fake Zoom Meeting Scams
North Korean-linked cybercriminals are executing a sophisticated, daily campaign of fake video meeting attacks that have siphoned over $300 million from cryptocurrency holders, according to cybersecurity researchers. The operation leverages compromised Telegram accounts of trusted contacts and malware disguised as software updates to steal digital wallets and credentials, creating a cascading threat through professional networks.
about North Korean Hackers Steal $300M via Fake Zoom Meeting Scams2025 Crypto Hacks Surge: Best Wallet Offers Security Solution
Crypto theft in 2025 has already surpassed 2024’s $2.2 billion total, with the $1.5 billion Bybit exploit highlighting escalating security risks. As attackers evolve faster than defenses, non-custodial wallets with MPC technology are emerging as critical solutions for retail investors seeking protection.
about 2025 Crypto Hacks Surge: Best Wallet Offers Security SolutionSafeWallet Overhaul After $1.5B Bybit Hack
SafeWallet has completely redesigned its security architecture following the devastating $1.5 billion Ethereum theft from Bybit exchange. The hack, attributed to North Korea’s Lazarus Group, exploited vulnerabilities in the platform’s multisignature approval process. This security overhaul represents one of the most significant responses to a major cryptocurrency breach in industry history.
about SafeWallet Overhaul After $1.5B Bybit HackGoogle Uncovers AI-Powered Malware Targeting Crypto Wallets
Google has identified five new malware families that leverage large language models to generate malicious code and target cryptocurrency wallets. State-linked groups including North Korea’s UNC1069 are using AI models like Gemini to craft sophisticated phishing scripts and locate wallet data. The tech giant has disabled malicious accounts and implemented enhanced safeguards against model abuse.
about Google Uncovers AI-Powered Malware Targeting Crypto WalletsNorth Korea Recruits Freelancers as Identity Proxies
North Korean IT operatives are deploying sophisticated new tactics by recruiting freelance workers as identity proxies to secure remote contracts and financial accounts, according to recent cyber intelligence findings. This evolving strategy represents a significant escalation in state-sponsored cyber operations, moving beyond fabricated documentation to exploit legitimate freelancers who provide remote access to their verified identities and computer systems. The scheme targets major platforms including Upwork, Freelancer, and GitHub before shifting coordination to encrypted messaging services like Telegram and Discord.
about North Korea Recruits Freelancers as Identity Proxies