North Korean threat actors are conducting a sophisticated macOS malvertising campaign that redirects users to fake software update pages to deliver crypto-stealing malware. This represents a new evolution of the ongoing Contagious Interview campaign, using deceptive full-screen update sequences to trick macOS users into installing malicious software.
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages displaying a full-screen non-existent update sequence to deliver malware as part of a new iteration of the long-running Contagious Interview campaign. The defining aspect of the attack is that bogus macOS software update screen stealthily
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
