North Korea-Linked Threat Actors Spread macOS NimDoor Malware via Fake Zoom Updates
APTHackingIntelligenceMalwareSecurityhackingnewsinformationsecuritynewsITInformationSecuritymacOSmalwareNimDoorNorthKoreaSecurityAffairsSecurityNews
Threat actors linked to North Korea are using fake Zoom updates to spread the macOS NimDoor malware, targeting crypto and Web3 companies with stealthy backdoors. Victims are tricked into installing the malware through phishing links sent via Calendly or Telegram. The NimDoor malware is a rare backdoor for macOS disguised as a Zoom update.