El grupo Lazarus de Corea del Norte inicia ataques de malware en macOS

Golden Finance reports that on April 22, the North Korean hacker organization Lazarus Group launched a new macOS attack campaign called “Mach-O Man,” targeting high-level executives and institutions in high-value sectors such as cryptocurrency and financial technology.
The attack uses a social engineering technique called “ClickFix,” tricking victims into pasting commands into the Mac terminal to gain access to corporate systems, SaaS platforms, and financial resources.
CertiK researchers stated, “Mach-O Man” is a modular macOS malware toolkit developed by Lazarus Group, which has now been adopted by other cybercriminal gangs and often self-deletes before victims notice, increasing the difficulty of tracing and detection.
Additionally, some attackers have carried out this attack by hijacking DeFi project domains and replacing them with fake Cloudflare messages.