{
 "id": "AIR-2025-0114",
 "slug": "north-korea-linked-actors-use-ai-executive-deepfakes-in-zoom",
 "title": "North Korea-Linked Actors Use AI Executive Deepfakes in Zoom Phishing",
 "summary": "Threat actors utilized AI-generated deepfakes of company executives during a fake Zoom call to deceive a Web3 employee. The victim was tricked into installing malware that deployed spyware, a keylogger, and a crypto wallet stealer.",
 "type": "ai_enabled_attack",
 "categories": [
  "deepfake_fraud",
  "ai_assisted_intrusion"
 ],
 "severity": 3,
 "targets": [
  "individual_victims",
  "enterprise_deployment"
 ],
 "products": [
  "Zoom"
 ],
 "incident_date": "2025-06-22",
 "incident_date_precision": "day",
 "first_reported": "2025-06-22",
 "sources": [
  {
   "url": "https://incidentdatabase.ai/cite/1117",
   "publisher": "AI Incident Database",
   "title": "North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee",
   "published_at": "2025-06-22"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_aiid",
 "tags": [
  "deepfake",
  "phishing",
  "lazarus",
  "malware"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:59:35.797Z"
}