The FBI has warned that a social engineering scheme it calls FaceStealer has taken in more than 900 victims over the past 18 months, using fake video calls aimed at people who work in cryptocurrency and web3.
Authorities say the scheme aggressively targets staff involved in the development and maintenance of open-source software. The bureau has described it as capable of deceiving even experienced users who are alert to security risks.
According to US authorities, the hackers play pre-recorded video of earlier victims whom the target knows, so the call looks legitimate. The audio is made to appear to fail.
The calls are secretly recorded and later reused as material to approach new victims, the authorities said.
A supposed fix for the failed audio downloads malware onto the target's device. That software lets the hackers reach contact lists and apps, widening the pool of people they can approach, according to the account given by US authorities.
The warning comes a week after Binance, described as the world's largest crypto exchange, said hackers had used fake job interviews to steal a record $6.3bn (£4.7bn) from the company.