Lazarus Group deploys new macOS malware targeting cryptocurrency industry executives

Techub News reports, according to Cointelegraph, that security researchers have discovered the North Korean hacker group Lazarus Group is attacking cryptocurrency firms and traditional business executives using a new macOS malware suite named "Mach-O Man." This malware lures victims into executing commands through fake Zoom or Google Meet meeting links, downloading programs in the background to steal credentials and infiltrate corporate systems.

Researchers stated that in its final stage, the malware extracts sensitive information such as browser extension data and macOS keychain entries, exfiltrates it via Telegram, and then self-deletes. Lazarus Group is alleged to be the mastermind behind the $1.4 billion theft from Bybit exchange in 2025, and this attack indicates its targets have expanded to non-crypto-native enterprises.