North Korea–Linked Hackers Use Deepfake Video Calls to Target Crypto Workers – Decrypt

In brief

• Attackers have used a fake video call and a Zoom “audio fix” to deliver macOS malware.
• The method matches a previously documented intrusion method tied to North Korea’s BlueNoroff, a Lazarus sub-group.
• The incident comes as AI-driven impersonation scams pushed crypto losses to a record $17 billion in 2025.