North Korean hackers use AI to forge videos and attack encryption practitioners

Hacker groups related to North Korea use AI to generate deepfake video calls, impersonate individuals familiar or trusted by victims, and induce the installation of malicious software. BTC Prague co-founder Martin Kucha ř revealed that attackers used hacked Telegram accounts to initiate video calls and, under the pretext of "fixing Zoom audio issues," induced victims to install malicious programs disguised as plugins, thereby gaining complete control of the device. Security research firm Huntress pointed out that this attack pattern is consistent with previous actions against encryption developers, as malicious scripts can execute multi-stage infections on macOS devices. Researchers attribute this series of attacks to the Lazarus Group, a North Korean backed hacker group. The head of information security at SlowMist, a blockchain security company, stated that such attacks target specific wallets and cryptocurrency practitioners.