Skip to main content
Emerging ThreatsMalware & Ransomware

North Korea Exploits Fake Meetings to Fuel Crypto Heists

Person's hand reaching for laptop keyboard on a desk in a brightly-lit office setting.

$40 billion: the size of Google's announced investment in Anthropic, a figure that landed at the center of this week's ISMG editors' panel and set the frame for conversation that ranged from state-backed crypto fraud to enterprise AI adoption.

North Korea's fake video meetings and crypto fraud

On the panel, ISMG editors flagged "North Korea's use of fake video meetings to fuel crypto fraud" as a pressing concern. The phrase — presented by the editors during their weekly discussion — points to a pattern in which fabricated virtual gatherings are being used as a vector for monetary theft tied to cryptocurrency. The editors put this technique alongside other evolving threat methods during the conversation, identifying it as a specific mechanism threat actors are exploiting to conduct crypto heists.

Google's $40 billion investment in Anthropic and the AI race

Editors discussed "Google's $40 billion investment in Anthropic and what it signals for the artificial intelligence race." The sheer size of the transaction was presented as a defining data point in ongoing competition among major technology firms and research labs. Within the panel, the investment served as a prism for exploring strategic positioning in AI: a large-capital commitment that, according to the editors' framing, carries implications for who can commercialize and scale generative AI capabilities.

Key takeaways from Google Next in Las Vegas on enterprise AI adoption

The panel also covered "key takeaways from Google Next in Las Vegas on enterprise AI adoption." Editors summarized lessons from that conference for business leaders weighing AI projects, including signals about how vendors are packaging AI for enterprise consumption and the operational considerations enterprises face when integrating generative models into production environments. The discussion connected conference messaging with real-world procurement and deployment choices organizations confront today.

Ron Ross, NIST SP 800-37, and building risk management programs

In related programming highlighted by the same publisher, the site promoted an exclusive presentation from Ron Ross, identified as the lead author of NIST Special Publication 800-37. The promotion describes Ross as set to cover fundamentals of developing a risk management program, including:

  • Understanding current cyber threats to public and private sector organizations;
  • Developing a multi-tiered risk management approach built on governance, processes and information systems;
  • Implementing NIST's risk management framework from defining risks to selecting, implementing and monitoring information security controls.

The material frames Ross's guidance as practical instruction for senior leaders who face heightened risks and increased regulatory pressure to improve organizational risk management capabilities.

What this means for technologists, policymakers, and enterprise leaders

Technologists and security teams will watch the reported use of fake video meetings for crypto fraud as a signal to reassess controls around virtual collaboration and transaction authorization; the editors raised the technique as an evolving threat to operational integrity. Policymakers and regulators — invoked implicitly by mention of "increased regulations" — will be pressured to consider how existing frameworks address novel fraud modalities tied to digital assets and synthetic media. Affected enterprises and procurement leaders should parse the Google-Anthropic investment and Google Next messaging to gauge vendor roadmaps and plan for enterprise AI adoption, while also heeding the promoted NIST-based risk management guidance from Ron Ross as a template for governance and control implementation.

The editors' panel tied three threads together: a concrete fraud technique linked to nation-state actors, a blockbuster private-sector investment reshaping the AI competitive landscape, and practical risk-management guidance aimed at organizations scrambling to keep pace. Each item on that list feeds into the others: fraud and threat evolution create operational and regulatory pressure; vendor strategy and capital flows shape the tools enterprises will adopt; and structured risk frameworks such as the NIST guidance are presented as the bridge between aspiration and accountable practice.

Taken together, the week's coverage underscores a simple operational imperative journalists and practitioners heard repeated: large strategic bets and new criminal techniques alike make clear why governance, process, and verified controls remain central to organizational resilience. The editors’ discussion leaves a pointed, practical question for leaders: how will your organization align vendor choices and threat awareness with the risk-management steps described by Ron Ross?

Original story