The U.S. government has disrupted a North Korean social engineering campaign called ‘FaceStealer’, responsible for stealing more than $400 million in cryptocurrency.

The attacks used multiple social engineering techniques, including deepfakes and ClickFix, to target individuals in the cryptocurrency and Web3 sectors, as well as open-source developers.

The FaceStealer campaign ran for 18 months before the U.S. seized the underlying cloud-based infrastructure.

U.S. authorities identified more than 900 webcam videos that hackers secretly recorded of tech workers, who were deceived in the massive North Korean operation.

An FBI alert earlier this week notes that the North Korean threat actor hijacked accounts on…