SentinelLabs has posted a report about a new malware that targets Mac users of blockchain technologies, such as crypto. The threat agents behind the attack are based in North Korea, according to research by Huntabil.IT, as cited by SentinelLabs.
The attack involves executable scripts written in AppleScript, C++, and Nim. Targeted users are sent a meeting invitation via Calendly, a cloud-based B2B scheduling service. The contact is made over Telegram as the attacker impersonates a trusted contact of the target. The invitation includes what appears as a link for a “Zoom SDK update script” but is actually a link to download and install the malware.
Read more at Macworld.com