The FBI and the U.S. Department of Justice have disrupted FaceStealer, a North Korean social engineering campaign that used hijacked accounts, replayed webcam footage and fake video calls to steal more than $400 million in cryptocurrency over the past 18 months. The DOJ announced on November 12, 2026, that it had seized cloud-based infrastructure behind the operation, and the FBI seized more than 900 webcam videos of victims under a federal warrant.

Read the full article at SOCRadar →