Fake video calls drive $400M crypto theft; DC condo feud turns deadly
Overall posture: Elevated5-minute read
The most important point this morning is that the FBI says North Korean hackers used fake video calls in a $400M crypto hack with an estimated 900 victims, so a face on screen is no longer proof of identity. A $9M gold bar scam in New York and a Microsoft outage that has disrupted email and Teams add pressure on how money and instructions move. In Washington, a dispute between a resident and building management ended in a shooting in Logan Circle, and a CEO's private ties became a congressional matter within days.
United States
Cyber & FraudUnited StatesHigh
Fake video calls are how North Korean hackers took $400M in crypto, the FBI says
The FBI says North Korean hackers used fake video calls in a crypto hack worth $400 million. The scheme, called FaceStealer, is thought to have caught more than 900 victims over the last 18 months.
Why it matters. The principal, family office executives and anyone who holds digital assets or approves transfers are exposed, because a convincing live call can now be staged to win trust. Your accounts and wires are the target, not just your devices.
What to do
Agree a call-back rule: any request involving money or credentials is confirmed on a number you already hold.
Treat unscheduled video meetings with new contacts as unverified until confirmed through a second channel.
A $9M gold bar scam in New York puts physical-asset buyers on notice
SILive reports that a New York City man lost $9 million in a gold bar scam. The NYPD has released photos of a suspect.
Why it matters. The principal, spouse and family office staff who handle large purchases or transfers are exposed, because high-value asset deals are being targeted in New York. Anyone who can authorize a large payment should expect an approach built around urgency.
What to do
Require two named approvers and independent verification of the counterparty before any large asset purchase.
Brief the office manager and assistants on this case and on who may release funds.
A dispute over condo conditions ended with five people shot in Logan Circle
Police say five people were shot in Logan Circle on Thursday and one was killed at a gym in an apartment building. A resident, a doctor, killed the building manager, then fired from his balcony and died by suicide. Court records, neighbors and social posts show he had complained about conditions at the building.
Why it matters. Residents of Washington and Northern Virginia condos, and the building managers, concierge and household staff who serve them, are exposed when a long dispute escalates. Principals who own in multi-unit buildings or sit on condo boards should assume a grievance can turn physical.
What to do
Report written or online threats from residents, vendors or former staff to your security lead and building management.
Review amenity and lobby access, and give staff a clear process for reporting a hostile resident.
A CEO's alleged affair with a suspected spy drew a congressional summons in days
Jensen Huang resigned as Nvidia chief on Thursday after revelations of alleged extramarital affairs, one with an alleged Chinese spy, and has been summoned to testify before Congress. The BBC reports concerns that sensitive US technology could reach China. His downfall has also set off a flood of AI-generated memes.
Why it matters. Executives, their spouses and boards are exposed, because private relationships can be treated as a security matter and a public figure's image can be turned into AI mockery. The exposure comes from what is findable about your private life and who you are close to.
What to do
Ask for a review of what is publicly discoverable about executives' personal relationships, travel and family.
Agree who speaks for you if a personal matter becomes public.
Microsoft's outage has knocked out email and Teams, and the fix is slow
Microsoft services including Outlook, Teams and Copilot have been disrupted worldwide, and repair efforts have so far been largely unsuccessful. Microsoft says the cause was not a cyber incident but servers becoming unavailable and straining other systems. In the UK, GP practices, police and pharmacies are affected, while major airports are not.
Why it matters. Family offices, executives and their assistants who run on Outlook and Teams may lose normal channels today. When teams improvise, payment or access requests arriving by a new route should be checked by call-back.
What to do
Set a backup channel for the principal and key staff and share the numbers now.
Do not act on any payment or login request that arrives through a workaround until you confirm it by phone.
Travel & RegionLiberia, Madagascar and eastern DR CongoModerate
Ebola screening now applies to travelers entering Liberia and Madagascar
The UK Foreign Office has updated its advice for Liberia, citing heightened health screening for arrivals, and for Madagascar, covering Ebola entry requirements and screening. The New York Times reports the Congo outbreak has a new epicenter in the east, cut off from aid by an armed group that has killed and kidnapped aid workers.
Why it matters. Traveling executives, families with African itineraries and staff posted there face screening on arrival and weak local support near the epicenter. Medical and security plans should be settled before departure.
What to do
Check the latest entry and screening rules for every stop before wheels-up.
Confirm medical evacuation and in-country security arrangements for staff and family on African routes.
Bomb threats forced a second day of school evacuations across Italy
Schools across Italy received suspected bomb hoax threats for the second day running, causing fresh evacuations and panic. Wizz's chief executive has said Europe should coordinate how it responds to bomb threats.
Why it matters. Families with children at school in Italy, and those traveling there, can expect abrupt evacuations and confused pickups. Parents and school staff need a plan that does not depend on one phone call.
What to do
Confirm the school's emergency contacts, pickup rules and an alternate meeting point for your children.
Ask the school how it will notify parents during an evacuation.
Three people have been charged in an alleged $129 million AI deepfake CEO fraud, a case that keeps impersonation of executives in the news. (Technobezz)
CISA has published advisories on Siemens building automation and energy products tied to critical PHP and Node.js flaws, so estate managers should ask vendors about exposure. (CISA · CISA)
City investigators are examining an excavation next door to the Flatbush Avenue building in Brooklyn that collapsed, killing eight people. (The New York Times · BBC News)
One thing to do today
Verify the face and voice before money moves
Fake video calls, a gold bar scam and a Microsoft outage all push teams toward improvised channels. SAG's Family Verification Protocol sets code words and call-back rules for wires, video calls and payment requests. SAG can put it in place for your family and office this week.
