New BlueNoroff Campaign Uses Fileless PowerShell and AI

Cybersecuritynews •Tushar Subhra Dutta • April 29, 2026

A dangerous new cyber campaign from North Korea’s Lazarus Group is targeting cryptocurrency and Web3 professionals using fake Zoom meeting interfaces, fileless PowerShell scripts, and AI-generated deepfake content. The group behind this activity is BlueNoroff, a financially motivated subgroup known for stealing digital assets. This campaign has spread across more than 20 countries, with the […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BlueNoroff Targets Cryptocurrency Executives with AI-Enhanced Fake Zoom Attacks North Korea's BlueNoroff group is executing a sophisticated campaign against cryptocurrency executives, utilizing fake Zoom meetings enhanced with AI-generated avatars and stolen video footage. The attacks primarily target individuals in the cryptocurrency and blockchain sectors, with a focus on those holding significant financial authority. Arctic Wolf's report indicates that the group has compromised at least 100 individuals, with eight out of ten victims being executives or co-founders. The attack method involves social engineering tactics, including Calendly invitations that lead to fake Zoom URLs, where victims unknowingly grant access to their webcams. This allows BlueNoroff to capture real-time video feeds for future attacks. The campaign has been active since January 2026, maintaining persistent access to compromised systems for up to 66 days. The use of fileless PowerShell malware further complicates detection and mitigation efforts. The campaign's scope has reportedly extended across more than 20 countries, indicating a widespread threat to the cryptocurrency sector. 6 sources 76

Extracted Entities

New BlueNoroff Campaign Uses Fileless PowerShell and AI

The full story

Extracted Entities

APT Groups (2)

Attack Types (1)

Campaigns (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)