North Korea hackers scan crypto wallets through fake Zoom calls

North Korea-linked hacking group BlueNoroff is using fake Zoom and Microsoft Teams meetings to target cryptocurrency users with malware. The attackers scan browser wallets, hijack Telegram accounts, and use phishing kits to steal browser keys, system data, and Telegram sessions. Victims are lured into fake meetings where their wallets are profiled before malware is delivered. The campaign builds on previous crypto meeting scams by the same group. Organizations are advised to be cautious with meeting links from trusted accounts, verify invitations through other channels, and review system activity after suspicious calls.