Photo via Dawn

North Korean hackers stole $400m using fake video calls: FBI

Read the original at Dawn ↗
Cite

AFP. (2026, November 13). North Korean hackers stole $400m using fake video calls: FBI. Dawn. https://www.dawn.com/news/2044296/north-korean-hackers-stole-400m-using-fake-video-calls-fbi

Dated from the outlet's own feed. Check the original for its byline.

Dawn · collected 2026-11-13 · by AFP

Quick Summary

The FBI reported that state-backed North Korean hackers used a social engineering scheme called "FaceStealer" to steal more than $400 million over the last 18 months. The operation involves hackers using AI-powered deepfake videos to impersonate people in a victim's contact list, eventually tricking the targets into installing malware during fake technical errors. This reporting focuses on how these tactics exploit personal trust and video conferencing platforms to fund North Korea’s illicit weapons program.
Written by AI on 2026-11-13, from this article's own text only (the story summary below draws on all the coverage).
See how they differ ↓

How they differ

3 outlets covered “FBI Pulls Plug On North Korean ‘FaceStealer’ Scheme”.

What each outlet says

One AI summary per outlet of its latest article on this story, written from that article alone and checked against it. Open the article for the outlet's own words.

DawnThis outlet13 Nov

The FBI reported that state-backed North Korean hackers used a social engineering scheme called "FaceStealer" to steal more than $400 million over the last 18 months. The operation involves hackers using AI-powered deepfake videos to impersonate people in a victim's contact list, eventually tricking the targets into installing malware during fake technical errors. This reporting focuses on how these tactics exploit…

North Korean hackers stole $400m using fake video calls: FBI (this article)
BBC13 Nov

The FBI reports that North Korean state-sponsored hackers used a social engineering scheme called FaceStealer to steal over $400 million in cryptocurrency from more than 900 victims over the last 18 months. The operation specifically targets individuals in the cryptocurrency and web3 sectors by using hijacked social media accounts to lure victims into fake video calls where they are prompted to download malware…

North Korean hackers used fake video calls in $400m crypto hack, says FBI →
Daily Caller13 Nov

The FBI and Department of Justice disrupted a North Korean cyber operation called "FaceStealer" that stole more than $400 million in cryptocurrency over an 18-month period. Hackers recorded over 900 tech workers' webcam footage to impersonate them in video calls, tricking colleagues into downloading malware to gain system access. The report highlights the use of AI deepfake technology in these schemes and notes that…

FBI Pulls Plug On North Korean ‘FaceStealer’ Scheme That Swiped $400 Million In Crypto →

Compared with similar articles

This article reads unscored and hedges 9% of its claims. Each row says how that neighbour differs.
BBC News
Hedges 5 of 14 claims Outlet record 66/100
CBS News
Hedges 2 of 11 claims Outlet record 68/100
“The articles describe two different events: one about the recovery of stolen cryptocurrency from Binance, and the other about North Korean hackers stealing funds using social engineering.”
The Daily Caller
Hedges 10 of 23 claims Outlet record 92/100
Washington Examiner
Hedges 0 of 2 claims Outlet record 67/100
“The articles describe different hacking incidents: one involving a $6.3 billion theft from Binance and the DOJ's response, and the other involving a separate $400 million theft using fake video calls.”
Just The News
Hedges 0 of 7 claims Outlet record 94/100
“While both articles discuss North Korean hacking and cryptocurrency theft, they describe different aspects of the event—one details the initial theft and the other the recovery of funds.”
New York Post
Hedges 2 of 31 claims Outlet record 66/100
“The articles describe different schemes: one involves stealing $6.3 billion from Binance and the other involves stealing more than $400 million using fake video calls over 18 months.”

Story

FBI Pulls Plug On North Korean ‘FaceStealer’ Scheme
Other · 3 article(s) covering the same event. See how they differ ↑
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
11
sentences that state something as happening or true
Uncertain
9%
1 of 11 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
72/100
Dawn's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
3
Other
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-11-13 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

Dawn · 3160 article(s) · 3 correction(s) detected
Running correction rate · 3 correction(s)

Who wrote this

AFP
1172 article(s) here · 1 carrying a prediction
The Knicks are last in East Group B and will host the Cleveland Cavaliers and Miami Heat in their last two Cup group games.
Donald Trump, Vladimir Putin and Xi Jinping will hold the first three-way meeting between the leaders of the United States, Russia and China at a summit in Shenzhen next week, the White House said Friday.
Flights in the United States were resuming on Saturday after being grounded for several hours due to a major communications outage, though authorities said returning to normal operations would take time.
AI bots going rogue and humans using the technology for harm will likely be on the agenda when Donald Trump and Xi Jinping meet next week, with the Nvidia scandal hanging over the talks on AI safety.
2026-11-14 · assertive framing · Nvidia scandal looms over US-China AI talks
Australian captain Pat Cummins wants to draw a line under “Sandpapergate” and move on, but the stench of the 2018 ball-tampering scandal is set to linger after a week of sensational accusations and denials.
In New York’s busy LaGuardia airport, Janice Llewellyn was on the verge of tears: the chaos could mean she will miss her daughter’s wedding in Toronto.
With almost 6,000 flights canceled including some international routes according to FlightAware, the recovery from the stoppage was expected to take some time.
With almost 6,000 flights canceled including some international routes according to FlightAware, the recovery from the stoppage was expected to take some time.
2026-11-14 · assertive framing · US grounds all flights for hours, sparking travel chaos
• Delay could push global price tag from $36bn to $73bn; De Croo urges IMF, wealthy nations to back crisis-hit economies • China reportedly rules out hosting 2028 COP33 climate summit ANTALYA: Act now against the devastating effects of El Nino or pay double later, the head of the United Nations Development Programme (UNDP) warned on Friday as delegates debated how to finance climate action at the COP31 talks in Turkey.
Confusion and delays At Las Vegas airport, the Southwest Airlines check-in desk told passengers there could be no flights taking off for the night.
Wire or desk byline, not an individual reporter.
Also by AFP
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 1172 articles by AFP →

Topics

Binance FBI FaceStealer North Korea North Korea’s

Subjects

FBI ORG · 5× Binance ORG · 2× American NORP · 1× Brett Leatherman PERSON · 1× FBI Cyber Branch ORG · 1× North Korea GPE · 1× North Korean NORP · 1× North Koreans NORP · 1× North Korea’s GPE · 1× Pyongyang GPE · 1×

Narrative

The FBI this month accused hackers affiliated with North Korea of the theft of $6 billion from cryptocurrency platform Binance, a charge Pyongyang denies. “The North Korean regime relies on proceeds from large-scale cryptocurrency theft to fund its illicit weapons program, stealing billions of dollars in recent years,” said FBI Cyber Branch Operations Director Brett Leatherman.
framing: assertive · carried by 1 article(s) · first seen 2026-11-13
If you can’t imagine a scenario where you might fall prey to it, you are not thinking creatively enough,” Grandy said.
2026-11-13 · Dawn
North Korean hackers stole $400m using fake video calls: FBI · assertive framing

Claims (11 extracted, 1 hedged)

North Korea’s state-backed hackers stole more than $400 million using a “highly effective social engineering scheme” involving identity theft and AI-powered fake video calls, the FBI said on Thursday. asserted
FBI → back → Thursday
The FBI this month accused hackers affiliated with North Korea of the theft of $6 billion from cryptocurrency platform Binance, a charge Pyongyang denies. “The North Korean regime relies on proceeds from large-scale cryptocurrency theft to fund its illicit weapons program, stealing billions of dollars in recent years,” said FBI Cyber Branch Operations Director Brett Leatherman. asserted
Leatherman → accuse → years
The FBI said that, aside from the Binance hack, North Koreans have “aggressively [targeted] individuals in the cryptocurrency and Web3 sectors through deceptive social engineering tactics”. asserted
Koreans → say → tactics
The scheme, which the American law enforcement agency dubbed “FaceStealer,” has led to the theft of more than $400m in the last 18 months. asserted
agency → dub → months
FaceStealer hackers pretend to be someone known to the victim to lure them to a video meeting, using AI-powered deepfake video to gain trust. asserted
hackers → pretend → trust
The hackers then “introduce a fake technical error” which requires the victim to click on a link or a prompt that installs malware. asserted
that → introduce → malware
By exploiting the victim’s contact lists, social media and communication apps, hackers can impersonate them to ensnare the next target. asserted
hackers → exploit → target
“FaceStealer is a highly effective social engineering scheme capable of deceiving even the most experienced technical and security-conscious computer user,” said Patrick Grandy, assistant director at the FBI’s Los Angeles Field Office. asserted
Grandy → deceive → Office
“It exploits our trust in ubiquitous video conference platforms and valued personal relationships. asserted
It → exploit → platforms
If you can’t imagine a scenario where you might fall prey to it, you are not thinking creatively enough,” Grandy said. uncertain
Grandy → imagine → it
The FBI said it seized more than 900 webcam videos of FaceStealer victims. asserted
it → say → victims
Give feedback · no sign-in needed

No sign-in needed for now. Your note is sent without a name, so it cannot be answered.

History Support