North Korea's Sapphire Sleet (APT38/Lazarus Group offshoot) is targeting macOS users in a multi-stage attack campaign. Attackers pose as fake recruiters on LinkedIn, lure finance professionals with phony job interviews, then deliver a malicious AppleScript disguised as a Zoom SDK update. The script uses thousands of blank lines

5m read timeFrom go.theregister.com
Post cover image
Table of contents
Bad Apple(Script) commands

Sort: