A person pretending to work for a leading crypto news site targeted cybersecurity professionals around the Black Hat and Def Con hacking conferences. The attacker reached out on X and used a fake Google Doc to try to trick targets into installing malware for Windows and macOS. Security firm Huntress detailed the campaign after one of its researchers went along.
The attacker shared a legitimate Google Doc that resembled a conference planning document, with a fabricated 'encrypted' panel built using Google App Script. The lure was timed to two of the year's biggest hacking events.
The episode shows even security experts can face sophisticated social engineering and document based attacks. It is a reminder that AI-era and document-based malware threats are rising.

A person pretending to work for a leading crypto news site targeted cybersecurity professionals around the Black Hat and Def Con hacking conferences. The attacker reached out on X and used a fake Google Doc to try to trick targets into installing malware for Windows and macOS. Security firm Huntress detailed the campaign after one of its researchers went along.

The attacker shared a legitimate Google Doc that resembled a conference planning document, with a fabricated 'encrypted' panel built using Google App Script. The lure was timed to two of the year's biggest hacking events.

The episode shows even security experts can face sophisticated social engineering and document based attacks. It is a reminder that AI-era and document-based malware threats are rising.

πŸ“° Source: TechCrunch
techcrunch.com β†—
Was this article useful?