BlueNoroff, a North Korean hacking group, has been targeting cryptocurrency users with fake Zoom and Microsoft Teams meetings. The attacks compromise victims in under five minutes, and the group has hit more than 100 victims across 20 countries.
Fake meeting invitations
The group sends out meeting invitations that look like legitimate Zoom or Teams links. Once a user clicks and joins, the attackers gain access to the victim's device. From there, they can drain crypto wallets and steal credentials. The whole process takes less than five minutes from the initial click.
BlueNoroff's track record
BlueNoroff is a North Korean state-backed hacking group. It has a history of targeting cryptocurrency exchanges and individual users. This campaign is part of a broader effort to steal digital assets to fund the regime. The group is known for its social engineering tactics and rapid exploitation.
Scale of the operation
Over 100 victims have been identified across 20 countries. The group's ability to compromise targets quickly makes it a persistent threat. The attacks show no signs of slowing down, and the group continues to refine its lures.
