Another day another North Korean scammer This time using the same "fake Zoom" scam that's been popular recently I'll detail what happened to me in this

First I got added to a group with fake "Joan" the CEO of @Openfort He asked to schedule a call with me, he used my scheduling link which used Google Meet, so far so good

He sent real links and decks to build rapport

When trying to get him to join the call, he makes up some excuse about an internal meeting

The link is to a very obviously real business website "http://businessmeet.xyz"

The website itself is a fake Zoom clone

The site acted like a normal Zoom call. I tool the call on my tablet though, so not sure what the behavior would've been on desktop. It probably tried to determine the OS before prompting the user to do something, but it just wasn't built for mobile OSes

During the call he said he couldn't hear me and asked for a screenshot using the in-call chat

Since they couldn't get me on my desktop, they gave up to regroup and try again

Not sure if the scammers are using AI now, but obviously not for everything, there's a big grammar slip up here, room for improvement

This was the fake email domain they used, notice how it's http://openfort.video instead of http://openfort.io

Gee golly no one could have predicted this stunning update