GhostCall is a financially motivated BlueNoroff campaign within the broader SnatchCrypto operation, targeting technology executives, venture-capital personnel, and Web3 or blockchain professionals. Operators approach victims through messaging platforms with investment or business pretexts, move them into fake or manipulated video meetings, and induce them to run purported conferencing updates or terminal commands. Resulting cross-platform infection chains steal wallet, browser, keychain, developer, cloud, and collaboration data, and later activity also extended into compromised software dependencies.