a]:text-inherit [&>a]:underline">
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works .
The DoJ's press release on the matter is blustery, but the FBI's detailed report contains the important details. The agency's techs seized "cloud-based infrastructure," containing 900 videos of targeted victims. FaceStealer is an advanced form of spear-phishing, complete with AI deepfakes, usage of the victims' contact networks and personal information, and carefully orchestrated preparation — sometimes months in advance.
The campaign isn't likely to stop despite the setback, and has reportedly been running for at least 18 months, a timeline that matches up with documented instances of similar intrusion attempts. The largest heist attributed to FaceStealer is the recent Binance hack that saw thieves make out the proverbial door with over $5 billion (most of it thankfully frozen and/or recovered), but far from the only one.
The FBI attributes about $400m in stolen cryptocurrency to the campaign, and importantly, also notes that the hackers have repeatedly tried to sneak into open-source software, chiefly Javascript/NPM modules and Rust crates. Despite not being mentioned by name, one example hack is almost certainly the Axios compromise from March 2026. The Node/Javascript library sees about 100 million downloads a week, and temporarily contained a remote-access tool — thankfully for only a few hours.
Jason Sayayman, the Axios developer in question, got hooked by an attacker posing as a legitimate company interested in hiring him. The malfeasants replicated the CEO's persona, created a Slack workspace with legitimate-looking channels, then invited him to a Teams meeting with multiple "people."
Suspected North Korean hackers steal $5.6 billion in crypto in record-breaking cryptocurrency heist, Binance withdrawals frozen
FBI shuts down over 40 North Korean laptop farms used by fake remote workers
Key considerations
- Investor positioning can change fast
- Volatility remains possible near catalysts
- Macro rates and liquidity can dominate flows
Reference reading
- https://www.tomshardware.com/tech-industry/cyber-security/SPONSORED_LINK_URL
- https://www.tomshardware.com/tech-industry/cyber-security/fbi-disrupts-north-korean-facestealer-campaign-behind-usd5-billion-binance-hack-doj-seizes-facestealer-cloud-infrastructure-containing-900-videos-of-tech-workers-hackers-used-ai-deepfakes-to-steal-usd400-million-and-compromise-open-source-software#main
- https://futureplc.com/privacy-policy/
- More Performance From Every Byte: How Full-Stack Codesign Solves AI’s Memory Challenge
- Walmart has slashed $730 off this monster gaming PC with RTX 5070 Ti
- Nvidia board reportedly approached Arm CEO Rene Haas during replacement search
- Elon Musk signs petition to reinstate Jensen Huang as Nvidia CEO
- Japanese workers return to fax machines during ongoing Microsoft 365 outage
Informational only. No financial advice. Do your own research.