North Korea's Lazarus Group Launches macOS Malware Attacks

Deep Tide TechFlow News, April 22, According to CoinDesk, North Korean hacker group Lazarus Group is launching a new macOS attack campaign called “Mach-O Man,” targeting executives and institutions in high-value sectors such as cryptocurrency and fintech.

The attack uses a social engineering method called “ClickFix,” tricking victims into pasting commands into the Mac terminal to gain access to corporate systems, SaaS platforms, and financial resources. CertiK researchers stated, “‘Mach-O Man’ is a modular macOS malware toolkit developed by Lazarus Group, now used by other cybercriminal gangs, and often self-deletes before victims notice, increasing the difficulty of attribution and detection. Additionally, some attackers have hijacked DeFi project domains and replaced them with fake Cloudflare messages to carry out this attack.”