This alert may not be shared outside your organization, Do Not Repost or send, place on other websites, List servers, or send to others via email, including other associations or parties. Members and Law enforcement use only. Contact us for any permissions. To do otherwise will result in the loss of membership.
Complete Story
12/16/2025
North Korean Fake Zoom Scam Spreads Fast as SEAL Reports Daily Attempts
Bitget
SEAL Security Alliance said it now tracks multiple daily attempts tied to the North Korean fake Zoom scam.
The fake Zoom crypto hack uses a meeting invite that looks normal. Then it shifts to a file download that installs malware.
Security researcher Taylor Monahan said the method has already stolen more than $300 million. The warning circulated with material credited to SEAL Security Alliance.
North Korean Fake Zoom Scam. Source: Taylor Monahan via X
Fake Zoom Crypto Hack Starts With Telegram Account Takeover
The North Korean fake Zoom scam often begins on Telegram. Monahan said the first message can come from an account the target recognizes.
The chat then moves into a Zoom plan. Monahan said attackers push a link that looks real. She said the link is “usually masked to look real.”
“They’ll share a link before the call that is usually masked to look real,”
Monahan said. She added that victims can see “the person + some of their partners colleagues” during the call.
Monahan also addressed claims about AI video.
More Info
Alerts
The FRPA alert system distinguishes us from other groups by gathering and providing information to law enforcement, retailers AND financial institutions.
more information
Resources
Your electronic library to help in fighting financial fraud for all of our partners.
more information