North Korean Hackers Exploit macOS with AppleScript and ClickFix Techniques
North Korean hackers have launched a sophisticated cyberattack targeting macOS users, particularly within financial organizations. The attack employs social engineering tactics, using AppleScript and the ClickFix technique to deploy malware. Victims are tricked into executing commands that lead to the installation of information-stealing malware. The campaign involves fake meeting invitations and compromised accounts to lure victims. The malware collects sensitive data, including credentials and system secrets, which are then exfiltrated over Telegram. This attack highlights the ongoing threat posed by state-sponsored hacking groups.