North Korean hackers deepfake execs in Zoom call to spread Mac malware

General
1

Like previous attacks, the primary goal was most likely cryptocurrency theft
The attacker sent a message containing a Calendly link for what appeared to be a Google Meet session, but the invite link was actually a fake Zoom domain controlled by the attackers.
During the meeting, the victim encountered issues with their microphone, which didn’t work, seemingly due to technical problems. The deepfakes advised the victim to download a supposed Zoom extension that would fix the problem.