Skip to Content
logologo
AI Incident Database
Open TwitterOpen RSS FeedOpen FacebookOpen LinkedInOpen GitHub
Open Menu
Faire un don
Découvrir
Envoyer
  • Bienvenue sur AIID
  • Vue de tableau
  • Vue de liste
  • Entités
  • Taxonomies
  • Vue spatiale
  • Blog
  • Résumé de l’Actualité sur l’IA
  • Incident au hasard
  • S'inscrire
Fermer
Découvrir
Envoyer
  • Bienvenue sur AIID
  • Vue de tableau
  • Vue de liste
  • Entités
  • Taxonomies
  • Vue spatiale
  • Blog
  • Résumé de l’Actualité sur l’IA
  • Incident au hasard
  • S'inscrire
Fermer
Entités

Cryptocurrency wallets

Incidents implicated systems

Incident 11171 Rapport
North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

2025-06-22

An alleged phishing scheme involving actors linked to North Korea used purported AI-generated deepfake videos of company executives to deceive a Web3 employee during a fake Zoom call. The target was reportedly tricked into installing macOS malware disguised as a "Zoom extension," leading to the deployment of spyware, a keylogger, and a crypto wallet stealer. The attackers reportedly used Telegram and spoofed Zoom domains to orchestrate the breach.

Plus

Incident 15561 Rapport
X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

2026-05-04

An X user reportedly induced Grok and Bankrbot to transfer 3 billion DRB tokens, then valued at about $200,000. After reportedly sending a Bankr Club Membership NFT to Grok's wallet, the user allegedly asked Grok to translate a Morse code message and relay it to Bankrbot. The decoded instruction reportedly directed a transfer to a specified wallet, which was reportedly executed on Base. The recipient reportedly sold the tokens soon afterward; linked funds were later returned or converted.

Plus

Entités liées
Autres entités liées au même incident. Par exemple, si le développeur d'un incident est cette entité mais que le responsable de la mise en œuvre est une autre entité, ils sont marqués comme entités liées.
 

Entity

North Korea

Incidents involved as Deployer
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Lazarus Group

Incidents involved as Deployer
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Government of North Korea

Incidents involved as Deployer
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

BlueNoroff

Incidents involved as Deployer
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Deepfake technology developers

Incidents involved as Developer
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Synthetic audio generation technology developers

Incidents involved as Developer
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Zoom

Affecté par des incidents
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Incidents implicated systems
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Web3

Affecté par des incidents
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Unnamed Web3 employee

Affecté par des incidents
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

National security and intelligence stakeholders

Affecté par des incidents
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

macOS users

Affecté par des incidents
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Epistemic integrity

Affecté par des incidents
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Cryptocurrency infrastructure

Affecté par des incidents
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Telegram

Incidents implicated systems
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

macOS

Incidents implicated systems
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Deepfake technology

Incidents implicated systems
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Synthetic audio generation technology

Incidents implicated systems
  • Incident 1117
    1 Report

    North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee

Plus
Entity

Cryptocurrency service providers

Incidents involved as Deployer
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Bankr

Incidents impliqués en tant que développeur et déployeur
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

@Ilhamrfliansyh (X)

Incidents involved as Deployer
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

xAI

Incidents involved as Developer
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Large language model developers

Incidents involved as Developer
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Cryptocurrency trading system developers

Incidents involved as Developer
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Chatbot developers

Incidents involved as Developer
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

AI agent system developers

Incidents involved as Developer
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

DRB token holders

Affecté par des incidents
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Digital asset holders

Affecté par des incidents
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Cryptocurrency wallet owners

Affecté par des incidents
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Cryptocurrency token holders

Affecté par des incidents
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

X (Twitter)

Incidents implicated systems
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Social media platforms

Incidents implicated systems
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Grok

Incidents implicated systems
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Cryptocurrency trading bots

Incidents implicated systems
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Chatbots

Incidents implicated systems
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Blockchain networks

Incidents implicated systems
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Base

Incidents implicated systems
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Bankrbot

Incidents implicated systems
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

AI agent systems

Incidents implicated systems
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus
Entity

Large language models

Incidents implicated systems
  • Incident 1556
    1 Report

    X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens

Plus

Recherche

  • Définition d'un « incident d'IA »
  • Définir une « réponse aux incidents d'IA »
  • Feuille de route de la base de données
  • Travaux connexes
  • Télécharger la base de données complète

Projet et communauté

  • À propos de
  • Contacter et suivre
  • Applications et résumés
  • Guide de l'éditeur

Incidents

  • Tous les incidents sous forme de liste
  • Incidents signalés
  • File d'attente de soumission
  • Affichage des classifications
  • Taxonomies

2026 - AI Incident Database

  • Conditions d'utilisation
  • Politique de confidentialité
  • Open twitterOpen githubOpen rssOpen facebookOpen linkedin
  • 18fcd27