A North Korean cybercrime group has launched a new social engineering campaign targeting Apple computers, marking a notable shift toward stealthier, more deceptive cyberattacks aimed at stealing cryptocurrency and sensitive data.

The actor, identified as Sapphire Sleet, is using a novel combination of trusted system tools and deceptive “fileless” execution patterns in pursuit of its cyberespionage objectives, Microsoft Threat Intelligence said in a report published Thursday.

Rather than exploiting software flaws, the attackers rely on tricking users into running malicious code themselves, allowing the attack to bypass Apple’s built-in security protections, according to the