North Korea's Lazarus Group Launches macOS Malware Attacks

Golden Finance reports that on April 22, North Korea’s hacker organization Lazarus Group is launching a new macOS attack campaign called “Mach-O Man,” targeting executives and institutions of high-value companies in cryptocurrency, fintech, and other sectors. The attack uses a social engineering method called “ClickFix,” tricking victims into pasting commands into the Mac terminal to gain access to corporate systems, SaaS platforms, and financial resources.
CertiK researchers stated, “‘Mach-O Man’ is a modular macOS malware toolkit developed by Lazarus Group, now used by other cybercriminal gangs, and often self-deletes before victims notice, increasing the difficulty of tracing and detection. Additionally, some attackers have carried out this attack by hijacking DeFi project domains and replacing them with fake Cloudflare messages.”