North Korea's Lazarus Group has been disclosed to be launching a new attack campaign called "Mach-O Man," mainly targeting high-level executives in cryptocurrency, fintech, and other high-value enterprises through social engineering attacks via routine business communication; the attack uses "ClickFix" technology to guide victims to participate in fake meetings and paste commands on Mac terminals, thereby gaining access to corporate systems and funds; CertiK researchers stated that this malware is a modular macOS toolkit that can self-delete after the attack, increasing difficulty in detection and tracking; data shows that over the past two weeks, related attacks have transferred more than $500 million from Drift and KelpDAO incidents, with Lazarus Group having profited approximately $6.7 billion since 2017. (CoinDesk)