Security experts targeted by fake crypto conference in scam to hand over details
- Huntress spotted a ClickFix campaign targeting security pros via fake conference invites
- Victims tricked into pasting code that installs AMOS infostealer on macOS
- If lured, isolate systems, reset credentials, rotate secrets, and review cryptocurrency wallets
Cybercriminals are targeting security professionals with a highly tailored ClickFix campaign in an attempt to get their computers infected with infostealer malware, experts have warned.
An active campaign against people who have attended, or have a history of attending, various cybersecurity conferences such as Black Hat, or DEF CON has been detetced by security researchers Huntress, who were targets themselves.
The attack starts on X, where the threat actor uses a fake account to interact with people visiting and sharing content from these conferences. After establishing rapport, they move into DMs, claiming they’re organizing a conference of their own, and sharing a Google Docs file containing “more info” with the victim.
Follow-up attack
...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
