North Korean Hackers Use AI Deepfakes in $400M Cryptocurrency Theft Scheme

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

North Korean state-sponsored hackers used AI-generated deepfake videos and social engineering tactics in the FaceStealer scheme to steal over $400 million in cryptocurrency from global victims. U.S. authorities disrupted the scheme, seizing cloud infrastructure and hundreds of stolen webcam videos. The attacks targeted crypto and Web3 industries.[AI generated]

Why's our monitor labelling this an incident or hazard?

The event involves an AI system or AI-enabled technology used maliciously to create fake video calls that deceive victims, leading to identity theft and large-scale cryptocurrency theft. The harm is realized and significant, including financial loss and privacy violations. Therefore, this qualifies as an AI Incident because the AI system's use directly caused harm to persons and property through cybercrime.[AI generated]
AI principles
Privacy & data governanceSafety

Industries
Financial and insurance servicesDigital security

Affected stakeholders
Consumers

Harm types
Economic/Property

AI system task:
Content generation


Articles about this incident or hazard