How Lazarus Used AI Zoom Lures to Drain Wallets in 5 Minutes (and How to Stop It)

The Attack Lifecycle The recent Arctic Wolf report on the BlueNoroff campaign is a masterclass in 2026 social engineering. 1. The Lure: A fake Calendly invite for a "quick sync." 2. The Payload: A "ClickFix" style attack hidden in a fake Zoom interface. 3. The Result: Full credential extraction from browser extensions in under 300 seconds. Why AI Changes the Game As someone building RAG-based AI agents, the most chilling part is the Live Camera Exfiltration . They aren't just stealing money; the