Security firm: North Korean hackers' "fake Zoom" software attacks have become a daily threat, stealing over $300 million in assets.

On December 15th, the cybersecurity nonprofit Security Alliance warned that they are currently detecting multiple scams per day per day per victim, perpetrated by North Korean hackers. These attacks lure victims into fake Zoom meetings. The scam involves tricking victims into downloading malware during a "fake Zoom call," thereby stealing sensitive information including passwords and private keys. Security researcher Taylor Monahan warned that this tactic has already stolen over $300 million from users. The scam typically begins with a message from a Telegram account, often belonging to someone the victim "knows." Because of this familiarity, the victim lowers their guard. The conversation then naturally transitions to an invitation to "catch up on Zoom." Once the call begins, the hacker pretends to have an audio problem and sends a supposed "patch file." When the victim opens the file, the device is infected with malware. The hacker then ends the fake call by saying "let's meet another day."