North Korean hackers use fake Zoom and Teams meetings to scan crypto wallets and deploy malware

Odaily Planet Daily reports: The North Korean hacking group BlueNoroff has been exploiting fake Zoom and Microsoft Teams meetings to analyze cryptocurrency users and deploy malware. The group first compromises accounts of trusted contacts within the crypto industry, then sends seemingly legitimate meeting links via services like Calendly, directing users to counterfeit Zoom and Teams domains. Once users enter the fake meeting page, it scans their browser for wallets and determines whether to proceed with the attack based on wallet value. The fake meeting also prompts users to “update Zoom/Teams” or run commands, which actually download malware compatible with Windows and macOS.