BlueNoroff Exploits Fake Video Calls to Target Crypto Investors

North Korean hackers are using fake video calls to target wealthy crypto investors. The group, known as BlueNoroff, checks for MetaMask and Solana wallets during these fake meetings.

Once they've detected a wallet, they distribute malware selectively based on the information gathered. Victims are often shown a message claiming their microphone isn't working, prompting them to download fake software that infects their device with malware.

Huntress and Arctic Wolf warn of extra caution as BlueNoroff has affected industry participants and investors in more than 20 countries, with over 100 victims so far. They've also used hacked social media accounts on Telegram, LinkedIn, and other platforms to invite victims to these fake meetings.