Coverage dated November 12, 2026 to November 14, 2026

US disrupts North Korean campaign behind $400 million crypto theft

Headline from Bleeping Computer, on the newest of 2 developments

The U.S. government has disrupted a North Korean social engineering campaign called 'FaceStealer', responsible for stealing more than $400 million in cryptocurrency. [...]

Bleeping Computer's own description from its feed. We collect headlines and these descriptions, not full articles; read the original reporting below.

Developments in this update

2 dated developments, oldest first, newest marked. Each is named by one outlet's own headline; open its reports to see every outlet that covered it.

  1. North Korean hackers stole over $400 million in crypto using fake video calls – FBI

    Headline from BNO News ·

  2. Newest

    US disrupts North Korean campaign behind $400 million crypto theft

    Headline from Bleeping Computer ·

Reports & sources

10 articles, oldest first.

  1. The Hill

    FBI: North Korean hackers have stolen $400 million in crypto over last 18 months (opens The Hill)

    Published

    The Hill's feed description

    The FBI said Thursday that North Korean hackers have stolen more than $400 million in cryptocurrency over the past 18 ​months using a social engineering scheme called “FaceStealer.” The scheme uses imposter versions of video conference platforms and secretly recorded web camera videos along with com…

  2. BNO News

    North Korean hackers stole over $400 million in crypto using fake video calls – FBI (opens BNO News)

    Published

    BNO News's feed description

    North Korean state-sponsored hackers stole more than $400 million in cryptocurrency over 18 months using fake video calls, according to the FBI. The bureau seized more than 900 webcam recordings the hackers had secretly made and used to impersonate victims.

  3. New York Post

    FBI reveals cunning ruse North Korean hackers used in massive crypto heist as feds claw back $1.2B (opens New York Post)

    Published

    New York Post's feed description

    The Justice Department said authorities seized the cloud servers used in the social engineering scheme, dubbed “FaceStealer.”

  4. Deutsche Welle

    US disrupts North Korea's $400 million crypto scam, FBI says (opens Deutsche Welle)

    Published

    Deutsche Welle's feed description

    The US has seized servers linked to a North Korean scam that used fake video meetings and deepfakes to steal more than $400 million in crypto, and has moved to seize $1.2 billion that was taken from Binance.

  5. KTLA Los Angeles

    FBI warns of North Korean ‘FaceStealer’ campaign targeting American employees (opens KTLA Los Angeles)

    Published

    KTLA Los Angeles's feed description

    Federal authorities are warning Americans – especially those in the tech and cryptocurrency industries – of the “FaceStealer” scam and social engineering campaign. According to the FBI, “cyberactors” from North Korea are aggressively targeting companies and individuals in the cryptocurrency and Web3…

  6. BizPac Review

    FBI pulls plug on North Korean ‘facestealer’ scheme that swiped $400 million in crypto (opens BizPac Review)

    Published

    BizPac Review's feed description

    The FBI cracked down on a North Korean operation to secretly hack tech employees’ webcams and steal hundreds of millions in cryptocurrency from their colleagues on video […]

  7. Los Angeles Times

    FBI disrupts crypto theft scheme by North Korean hacking group; billions stolen so far (opens Los Angeles Times)

    Published

    Los Angeles Times's feed description

    The FBI said the North Korean hacking group is targeting cryptocurrency executives, Web3 industries, as well as people involved in the development and maintenance of open-source software.

  8. Bleeping Computer

    US disrupts North Korean campaign behind $400 million crypto theft (opens Bleeping Computer)

    Published

    Bleeping Computer's feed description

    The U.S. government has disrupted a North Korean social engineering campaign called 'FaceStealer', responsible for stealing more than $400 million in cryptocurrency. [...]

Identical headlines usually mean shared wire copy. They are counted as separate articles but are not independent confirmation.

US disrupts North Korean campaign behind $400 million crypto theft | Since Then