crypto cybercrime

The crypto cybercrime tag covers reporting on campaigns that target cryptocurrency and fintech leaders through social engineering rather than conventional software exploits. Current coverage focuses on Lazarus Group’s Mach-O Man operation, which uses fake invitations for Zoom, Microsoft Teams, and Google Meet meetings to persuade executives to paste malicious commands into macOS Terminal. The campaign highlights how attackers can turn trusted collaboration platforms and a victim’s own actions into the delivery mechanism. Although this incident targets Apple environments, it offers a relevant security lesson for Windows organizations: meeting invitations, remote-work workflows, and familiar productivity tools can become part of the attack surface.