DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

A malvertising campaign targeting macOS users has been linked to threat actors from North Korea. The campaign involves redirecting users to fake web pages that display a fake update sequence, which is used to deliver malware. This is part of a new iteration of the Contagious Interview campaign. The fake macOS software update screen is designed to be stealthy. The malware is used to steal cryptocurrency. The campaign is a sophisticated example of malvertising being used to deliver malware to macOS users.