North Korea-Linked Actors Use AI Executive Deepfakes in Zoom Phishing

# North Korea-Linked Actors Use AI Executive Deepfakes in Zoom Phishing

https://gcdradar.vercel.app/incidents/north-korea-linked-actors-use-ai-executive-deepfakes-in-zoom · AIR-2025-0114 · closed 2025-07-06

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2025-06-22
- AI role: AI-enabled attack
- Products: Zoom

## Summary

Threat actors utilized AI-generated deepfakes of company executives during a fake Zoom call to deceive a Web3 employee. The victim was tricked into installing malware that deployed spyware, a keylogger, and a crypto wallet stealer.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-06-22: North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee (https://incidentdatabase.ai/cite/1117)

## Sources

- 2025-06-22 AI Incident Database: North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee https://incidentdatabase.ai/cite/1117

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.