'The attacker completed in under five minutes': Experts warn of North Korea-linked campaign using fake Zoom meetings to target crypto execs

North Korean flag with a hooded hacker.

• State-sponsored attackers crafted convincing fake video calls to target cryptocurrency firms
• A clipboard hijack trick replaced benign commands with malware‑deploying code
• The operation enabled rapid credential theft, persistence, and full system compromise

Security researchers Arctic Wolf have revealed details of a highly sophisticated campaign targeting North American Web3 and cryptocurrency companies.