Le groupe Lazarus de la Corée du Nord lance une attaque de logiciels malveillants sur macOS

Gold Finance reports that on April 22, the North Korean hacker group Lazarus Group launched a new macOS attack campaign called “Mach-O Man,” targeting high-level executives and institutions in high-value sectors such as cryptocurrency and fintech. The attack uses a social engineering technique called “ClickFix,” tricking victims into pasting commands into the Mac terminal to gain access to corporate systems, SaaS platforms, and financial resources.
CertiK researchers stated, “Mach-O Man” is a modular macOS malware toolkit developed by Lazarus Group, which has now been adopted by other cybercriminal gangs and often self-deletes before victims notice, increasing the difficulty of tracing and detection. Additionally, some attackers have carried out this attack by hijacking DeFi project domains and replacing them with fake Cloudflare messages.