North Korea's Sapphire Sleet (APT38/Lazarus Group offshoot) is targeting macOS users in a multi-stage attack campaign. Attackers pose as fake recruiters on LinkedIn, lure finance professionals with phony job interviews, then deliver a malicious AppleScript disguised as a Zoom SDK update. The script uses thousands of blank lines
Table of contents
Bad Apple(Script) commandsSort: