Hackers Spoof CoinDesk Executive in Fake Crypto Conference, Using Google Script Malware
Updated
Updated · bitcoinworld.co.in · Aug 20
Hackers Spoof CoinDesk Executive in Fake Crypto Conference, Using Google Script Malware
3 articles · Updated · bitcoinworld.co.in · Aug 20
Summary
A fake online crypto conference surfaced on Aug. 9 after attackers posing as a CoinDesk vice president invited cybersecurity researchers and sent malicious documents.
Google Apps Script inside the document checked each target’s operating system and then delivered platform-specific malware, using Google’s infrastructure to help the attack evade detection.
No damage has been reported so far, but the campaign showed how trusted media brands and event invitations can still fool technically skilled targets.
Huntress had earlier linked a similar lure to a broader campaign around Black Hat and Def Con that used Google Docs to push Windows malware, an infostealer and a fake Ledger installer.