Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
US seizes $1.2B from Binance theft and disrupts North Korean 'FaceStealer' tools.
The U.S. Department of Justice and FBI announced the seizure of over $1.2 billion in cryptocurrency stolen from Binance, attributed to the North Korean hacking group TraderTraitor. Additionally, the FBI disrupted cloud infrastructure used by North Korean hackers for a social engineering campaign called 'FaceStealer,' which stole over $400 million in cryptocurrency using malware delivered via malicious video conference links and deepfakes.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Binance?
Get an email when a new story names Binance, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe TraderTraitor group, linked to North Korea, executed two massive cryptocurrency thefts totaling over $1.6 billion by exploiting human trust rather than purely technical vulnerabilities. The FaceStealer campaign used deepfake video calls and malicious meeting links to deceive victims into installing malware, demonstrating that even sophisticated organizations can be compromised when employees lack awareness of advanced social engineering tactics. Cryptocurrency platforms and their employees were targeted precisely because high-value assets combined with human susceptibility create an irresistible attack surface. This matters because nation-state actors are now weaponizing AI-generated deception at scale, making traditional security training insufficient without specific guidance on deepfake and impersonation threats.
What helps against this
How we list vendors- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — FaceStealer