North Korean hackers are behind a new and unusually sophisticated macOS malware campaign that targets the crypto industry using fake Zoom invites. Here’s how it works.
Dubbed “NimDoor” by researchers at SentinelLabs, the attack is more sophisticated than the typical macOS threat, and it chains together AppleScript, Bash, C++, and Nim to exfiltrate data and maintain access in compromised systems.
Here’s SentinelLabs’ executive summary of the hack:
lockquote class=”wp-block-quote is-layout-flow wp-block-quote-is-layout-flow”>
- DPRK threat actors…
lockquote>
