According to CoinMeta, North Korean hackers stole over $400 million in cryptocurrencies over 18 months by using fake video conferences and impersonating trusted contacts. The operation, dubbed “Facestealer,” began with invitations from compromised accounts. Attackers replayed stolen webcam recordings or used images generated by AI to make their targets believe they were talking to familiar people. During the meetings, attackers posed as technical support personnel, provided troubleshooting links, and installed malware to steal digital assets or exploit the victims’ system access rights. The U.S. Department of Justice stated that it has disrupted the infrastructure supporting this activity and seized over 900 webcam recordings. Additionally, in a Binance theft incident attributed to North Korea, authorities froze over $2.7 billion, and the DOJ obtained court authorization to seize or restrict over $1.2 billion. Binance claimed to have compensated the stolen funds to its customers. This case highlights that familiar faces on screens are no longer sufficient proof of identity.