FCCCall is a forged video-conferencing application used in Lazarus operations against cryptocurrency professionals. Windows MSI and macOS DMG versions have been observed, while related malicious projects cover Windows, Linux, and macOS. The Windows sample uses Qt6 and displays a freeconference.com conference window while launching a data-stealing trojan in the background. It steals cryptocurrency-wallet extension data, downloads a Python environment and staged Python payloads, and can perform host reconnaissance, file theft, shell execution, keylogging, clipboard and window monitoring, and unattended AnyDesk configuration. Victims are lured through job and research offers and Telegram conversations.