Zoom Calls? Beware! Lazarus Is Targeting Crypto Founders

Kenny Li, co-founder of Manta Network, recently raised alarms about the modus operandi of Lazarus, the North Korean hacking collective, and its use of Zoom. Li reported that he was targeted by a known contact using a Zoom-like app that requested access to his camera.

Lazarus Is on the Move: Zoom Calls Used to Target Crypto Founders

Lazarus, one of the most prolific North Korean cryptocurrency hacking collectives, is reportedly on the move again, targeting cryptocurrency founders to gain access to their operations and wallets. Kenny li, co-founder of Manta network, revealed on social media that he was targeted by Lazarus using a Zoom-like app replacement.

Li said that he was reached via Telegram by a known contact to have a chat, scheduling a Zoom call for this end. However, when Li was ready to access the call using the app believed to be Zoom, he noticed a strange behavior.

He declared:

When I got on the Zoom, it asked me for camera access which I found a bit odd because I have used Zoom many times.

Li stressed that he could already see the faces of the people who supposedly needed to be in the call, giving it an aura of legitimacy. Nonetheless, he stressed that the odd behavior of the app was what made him abandon the call without making any changes to his Zoom install.

“I immediately left. Messaged the guy on Telegram and told him to call me on TG to verify him. He then proceeded to erase all the messages and block me,” Li concluded.

Li’s incident hints at a high level of sophistication in the targeted attacks of Lazarus against cryptocurrency founders, including even social engineering and pre-recorded videos of other founders to make prospective victims feel safer and relaxed when facing these events.

Lazarus has been very successful with its approach to cryptocrime: for April, the group held 9,400 BTC worth more than $793 million, making North Korea the nation with the third-largest bitcoin stash behind the U.S. and the U.K.

Read more: From 13,332 to 9,400 Bitcoin in 27 Days: Lazarus Group Relocates 3,932 BTC