Morning Edition · Sunday, July 26, 2026Published at 1:29 AM EDT · New York

North Korean Hacking Group Uses Fake Zoom and Teams Calls to Profile and Drain Crypto Wallets

Researchers found the BlueNoroff group running an active phishing kit that identifies a victim's wallet before delivering malware, compromising a full system in under five minutes.

The North Korea-linked group known as BlueNoroff is running fake Zoom and Microsoft Teams meetings to scan crypto wallets, hijack Telegram sessions, and deliver malware on Windows and macOS, according to security researchers. The campaign t…