The FBI disclosed a cybercrime campaign that used forged video calls to trick victims into installing malware and handing over funds.

Modus operandi

Attackers sent invitations appearing to come from compromised accounts of friends and contacts and played prerecorded video to impersonate them.

After initiating the call, perpetrators reported a supposed audio problem and provided a link claiming to fix the issue, which delivered malicious software.

Scale of losses and seizures

Over an eighteen-month period, investigators estimate cumulative losses exceeded $400 million, and authorities seized related infrastructure and more than 900 victim recordings.

Separately, U.S. authorities obtained court permission to seize and block over $1.2 billion tied to a related Binance intrusion; that sum is part of already frozen $2.7 billion.

Practical guidance

If a caller asks you to download an "update" or follow a link to "fix audio," confirm the request through a different verified communication channel before taking action.

Users are advised to treat unexpected software prompts with caution and to report suspicious messages to their service providers and law enforcement.