collaboration phishing

The collaboration phishing tag covers social-engineering campaigns that use trusted meeting and communication platforms as a delivery mechanism. Current coverage examines Lazarus Group’s Mach-O Man campaign, which targets crypto and fintech executives with fake Zoom, Microsoft Teams, and Google Meet invitations. Victims are persuaded to paste malicious commands into macOS Terminal, allowing their own actions to complete the attack rather than exploiting a software vulnerability. The discussion also considers why collaboration tools have become an important security boundary and what Windows-focused organizations can learn from attacks aimed at Apple environments. Explore this tag for reporting on fake meeting lures, command-pasting tactics, and collaboration-based phishing risks.