朝鲜黑客用AI深度伪造Zoom行骗,加密货币公司遭精准“社工+木马”双杀

2月11日消息,谷歌旗下安全团队Mandiant披露,一个与朝鲜有关联的黑客组织,正利用深度伪造视频与虚假Zoom通话,对加密货币行业发动高度定制化的社会工程攻击,并通过植入多种恶意程序实施资产与数据窃取。

调查显示,该行动由网络威胁组织UNC1069发起。该团伙至少自2018年活跃,并在2023年后将目标从传统金融转向Web3领域,包括加密金融科技公司高管、软件开发者和风投从业者。此次事件始于一名业内高管的Telegram账户被劫持,攻击者以其身份接触目标,建立信任后发送伪造的Calendly视频会议邀请。

受害者点击链接后,被引导至攻击者控制的假Zoom域名。通话中,对方展示了一段疑似另一家加密公司CEO的深度伪造视频,并以“音频故障”为由,诱导目标在电脑上运行所谓的排错命令。这些命令在macOS和Windows系统中触发感染链,悄然部署多达七种恶意软件。

Mandiant确认,这些工具可窃取Keychain凭据、浏览器Cookie、登录信息、Telegram会话及本地敏感文件。研究人员判断,攻击者一方面意在直接获取加密资产,另一方面也在收集情报,为后续诈骗铺路。单台设备中部署如此多工具,表明这是一次精心策划的定点渗透。

这一事件并非孤例。2025年,类似的AI会议诈骗已造成超过3亿美元损失;全年与朝鲜相关的网络行动共窃取约20.2亿美元数字资产,同比增长51%。Chainalysis还指出,结合链上AI服务的诈骗团伙,其效率显著高于传统模式。

随着深度伪造门槛持续降低,加密行业正面临前所未有的安全挑战。专家提醒,涉及资金与系统权限的线上会议,必须强化多重验证与设备隔离,否则将成为下一波攻击的突破口。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Articoli correlati

TRM Labs Reports $35B Lost to Crypto Scams Worldwide in 2025

TRM Labs reports a rise in global crypto fraud, reaching $35 billion in 2025, likely underestimating actual losses. Enhanced training and blockchain tools are essential for law enforcement to combat sophisticated fraud schemes effectively.

TheNewsCrypto55m fa

伊朗、北韓都在用!穩定幣成非法交易首選虛擬資產,涉詐額達 510 億美元

根據FATF報告,穩定幣已成為非法交易的首選資產,尤其在伊朗與北韓等國被廣泛使用。該組織呼籲加強對穩定幣發行商的監管,並指出在2025年,穩定幣將占大部分非法虛擬資產交易。為應對相關挑戰,FATF建議發行商應加強技術能力,以提高監管效率。

区块客59m fa

Address Poisoning Scam: TON Whale Loses $220K, Scammer Returns Most

_A TON blockchain whale sent $220K to a scammer by mistake. The scammer kept $17K and returned the rest with an apology note._ A TON blockchain whale recently fell victim to an address poisoning scam. The incident cost him $220,000 worth of TON tokens. He sent the funds to the wrong wallet by

LiveBTCNews1h fa

OpenClaw出现「自我攻击」漏洞:误执行Bash命令致密钥泄露

GoPlus 报告称,AI 工具 OpenClaw 发生自我攻击安全事件,因错误的 Bash 指令导致敏感环境变量泄露。建议在 AI 开发中使用 API 调用,遵循最小权限原则,限制高风险操作并引入人工审核。

GateNews2h fa

太子集團在台洗錢 107 億!自行開發「OJBK 錢包」連結地下匯兌

台北地檢署偵辦的柬埔寨「太子集團」洗錢案,涉及非法洗錢高達107億,起訴陳志等62人,並查出集團利用USDT與自開發的「OJBK錢包」進行跨境洗錢。陳志指揮在多國設立公司,透過不實交易合約隱匿犯罪所得,並購置豪宅與名車,檢方對其求刑最高13年。

区块客4h fa

New Coruna IOS Exploit Kit Raises Security Risks for Crypto Users

The newly identified "Coruna" exploit kit poses a serious threat to Apple devices, containing 23 sophisticated vulnerabilities that can compromise iPhones across multiple iOS versions. Researchers warn that these tools are circulating in cybercrime markets, emphasizing the need for regular software updates to enhance security.

TodayqNews4h fa
Commento
0/400
Nessun commento