The U.S. Department of Justice seized cloud infrastructure supporting a North Korean cyber-theft operation that stole over $400 million in cryptocurrency over an 18-month period. The campaign, attributed to the Lazarus Group-linked "FaceStealer" malware, targeted crypto users by impersonating trusted contacts on video calls. According to officials, victims were lured into fake technical support interactions where malicious software was installed on their devices, granting attackers access to wallets and private keys. The DOJ action disrupts one of the largest known state-sponsored crypto theft operations to date.