# North Korean Hacking Group Uses Fake Zoom and Teams Calls to Profile and Drain Crypto Wallets

Researchers found the BlueNoroff group running an active phishing kit that identifies a victim's wallet before delivering malware, compromising a full system in under five minutes.

- Published: 2026-07-26T05:29:43.539Z
- Canonical: https://polylog.news/crypto/2026-07-26/north-korean-hacking-group-uses-fake-zoom-and-teams-calls-to
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [crypto.news](https://crypto.news/north-korea-hackers-scan-crypto-wallets-through-fake-zoom-calls/), [The Hacker News](https://thehackernews.com/2026/07/bluenoroff-zoom-phishing-kit-profiles.html), [Dark Reading](https://www.darkreading.com/cyberattacks-data-breaches/bluenoroff-turns-victims-into-new-attack-lures)

The North Korea-linked group known as BlueNoroff is running fake Zoom and Microsoft Teams meetings to scan crypto wallets, hijack Telegram sessions, and deliver malware on Windows and macOS, according to security researchers. The campaign t…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-07-26/north-korean-hacking-group-uses-fake-zoom-and-teams-calls-to (subscription information: https://polylog.news/pricing).