Back to Feed
Nation-stateNov 12, 2026

Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools

US seizes $1.2B from Binance theft and disrupts North Korean 'FaceStealer' tools.

The U.S. Department of Justice and FBI announced the seizure of over $1.2 billion in cryptocurrency stolen from Binance, attributed to the North Korean hacking group TraderTraitor. Additionally, the FBI disrupted cloud infrastructure used by North Korean hackers for a social engineering campaign called 'FaceStealer,' which stole over $400 million in cryptocurrency using malware delivered via malicious video conference links and deepfakes.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Binance?

Get an email when a new story names Binance, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

The TraderTraitor group, linked to North Korea, executed two massive cryptocurrency thefts totaling over $1.6 billion by exploiting human trust rather than purely technical vulnerabilities. The FaceStealer campaign used deepfake video calls and malicious meeting links to deceive victims into installing malware, demonstrating that even sophisticated organizations can be compromised when employees lack awareness of advanced social engineering tactics. Cryptocurrency platforms and their employees were targeted precisely because high-value assets combined with human susceptibility create an irresistible attack surface. This matters because nation-state actors are now weaponizing AI-generated deception at scale, making traditional security training insufficient without specific guidance on deepfake and impersonation threats.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • malware — FaceStealer

Entities

TraderTraitor (threat_actor)Binance (vendor)