Cybercriminals Target Security Researchers with Fake Crypto Conference Scam
A hacker impersonating a crypto news site targeted cybersecurity professionals during the Black Hat and Def Con conferences in August by using social media to lure victims into installing malware. The attacker used Google Docs as part of their scheme, creating fake conference planning documents that appeared legitimate but were designed to trick users into entering false decryption keys. This led to attempts to install operating system-specific malware on macOS and Windows systems. Huntress researchers documented the attack after one of its members engaged with the hacker under controlled conditions. The scam used Google App Script to create a convincing sidebar in the document, making it appear encrypted. The malicious payload included an infostealer for Apple computers, repurposed remote desktop tools as malware for Windows users, and a fake Ledger wallet installer. This attack highlights how cybercriminals are increasingly using sophisticated social engineering tactics combined with legitimate platforms to deceive even highly skilled professionals in the cybersecurity field.
