Zoom Doom: North Korean Hackers Exploit Remote Control Feature to Pilfer Crypto Secrets
North Korean cryptocurrency thieves are using Zoom Remote Control to plant malware on traders’ computers. These hackers pose as VC investors, lure targets with fake podcast invites, and disguise malicious requests as system notifications. A single hasty click can grant them full access, turning Zoom into a digital Trojan horse.

Hot Take:
North Korean hackers are proving that while you should never Zoom and drive, you should also never Zoom and let strangers take the wheel. It’s a wild ride of phishing scams, malware, and more drama than a Zoom cat filter fail. Who knew a little-known feature could cause such a stir in the cryptocurrency world?
Key Points:
- North Korean hackers are exploiting a Zoom feature to install malware on cryptocurrency traders’ computers.
- The attackers pose as VC investors and use Calendly links for phishing lures to Zoom meetings.
- The malware acts as an infostealer or remote access trojan, exfiltrating sensitive data from victims.
- Zoom’s Remote Control feature is the weak link, often left enabled by default, facilitating the attack.
- The attack mirrors social engineering tactics seen in high-profile crypto hacks, shifting focus from technical to operational security risks.
Already a member? Log in here