Crypto.news reported that BlueNoroff, a hacking group linked to North Korea, used fake Zoom and Microsoft Teams meetings to profile cryptocurrency users before deploying malware. The operation reportedly began by taking over accounts belonging to trusted crypto industry contacts, then sending meeting invitations through services such as Calendly. Those links led victims to spoofed Zoom or Teams domains designed to look legitimate. Once on the fake meeting page, the site quietly scanned browser wallets and used the wallet’s value to decide whether to continue the attack. Victims were then prompted to “update Zoom/Teams” or run commands, which in fact delivered malware for both Windows and macOS. According to the report, the malware could steal browser keys, system data, and Telegram sessions.
ChainCatcher, citing Crypto.news, reported that BlueNoroff, a hacking group linked to North Korea, used fake Zoom and Microsoft Teams meetings to assess cryptocurrency users before deploying malware.
The report said the attackers first took control of accounts belonging to crypto industry contacts trusted by the victim. They then used services such as Calendly to send meeting links that appeared normal but actually directed targets to spoofed Zoom or Teams domains.
After a user entered the fake meeting page, the site quietly scanned browser wallets and decided whether to continue the attack based on the wallet’s value. The page then asked the user to “update Zoom/Teams” or run commands, which actually downloaded malware compatible with Windows and macOS.
According to the report, the malware was able to steal browser keys, system data, and Telegram sessions.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
