The FBI says North Korean state-backed hackers stole more than $400 million in cryptocurrency over 18 months using a social engineering scheme it calls FaceStealer. Victims are lured into video chats on fake versions of apps such as Zoom, Microsoft Teams and Google Meet, with invitations coming from genuine contacts whose social media and communication accounts have been compromised. Once a target joins the call, the FBI says they are shown a mock technical error that directs them to click a link. Clicking the link infects the target’s computer and social media accounts, and the compromised contacts are then used to reach more people. The FBI says the attackers also rely on surreptitiously recorded images. It has identified and seized more than 900 victim webcam videos, according to an FBI advisory. The FBI also warned that hackers are starting to use artificial intelligence to create deepfake videos of well-known figures in cryptocurrency and blockchain. The activity has been attributed to a North Korean hacking cluster known as Sapphire Sleet, also tracked as UNC1069, separate from another group linked to the recent $6.3 billion Binance cryptocurrency exchange hack. The FBI says the investigation is ongoing.