North Korean cybercriminals are posing as employers to trick jobseekers into downloading malware disguised as a MacOS video call application, a security researcher has found.

In the new phishing campaign, DPRK attackers “made an exact copy of the legit website” for MiroTalk, a free browser-based video call service for MacOS, in order to distribute an update of the BeaverTail malware used in the past to steal cryptocurrency wallets and credit card information, cybersecurity specialist and founder of Objective-See Patrick Wardle told NK Pro.

The expert wrote in his initial research that the malicious tool, first