A link in the body of the message downloads an encrypted zip that contains a DMG file.

This technique has been observed ITW to deliver Meta Stealer, Atomic Stealer, and other MacOS malware.

Notably, in some instances, the attacker poses as a recruiter and initiates back and forth conversation with the recipient.

Read More