A new strain of MacOS malware is targeting those who like to discuss their cryptocurrency investing in Slack or Discord groups. The social engineering attack presents a request from a user identifying themselves as an administrator of the group. They ask the victim to run a lengthy command in a terminal window, then ignore the 34 Mbyte file that is downloaded. If the victim does both of these things, they find that their Macintosh has been hijacked by a hacker using a C&C server in the Netherlands. In a comment supplied to Dark Reading, Ryan Benson said, “A lot of otherwise non-technical people have jumped on the cryptocurrency bandwagon and want to get involved””]

