BlueNoroff disguises Zoom and Teams to profile crypto wallets and deliver malware

Colleagues, I’d like to highlight a cybersecurity update.

BlueNoroff uses fake Zoom and Microsoft Teams to build trust through familiar contacts and then deliver malware.

Key points:
• before the attack, the kit checks which crypto wallets and browser extensions are installed;
• the victim is shown a fake meeting and messages about an “SDK update”;
• on Windows and macOS, chains are launched that disable security controls and steal data.

Why it matters: the attack targets not only infrastructure, but also people, contacts, and sessions — often the true entry point.

How do you verify trusted channels and links before meetings?

#cybersecurity #phishing #malware #crypto