Cybersecurity experts are raising alarms about a recent surge in cyberattacks from North Korean hackers, particularly targeting macOS users. The Lazarus Group is utilizing a new malware toolkit known as "Mach-O Man," which is designed to exploit vulnerabilities in macOS systems, especially those used by cryptocurrency and fintech companies.
This malware is distributed through a technique called ClickFix, where victims receive urgent meeting invitations via platforms like Zoom or Microsoft Teams. These invitations prompt users to enter a command in their terminal to supposedly resolve a connection issue, inadvertently granting hackers access to sensitive corporate networks and financial resources.
Mauro Eldritch, a cybersecurity expert, highlighted the mechanics of this attack, emphasizing how it leverages social engineering to deceive users. In some instances, hackers have even hijacked DeFi project domains, replacing legitimate websites with fraudulent messages that coax users into executing harmful commands.
