This was interesting. I hadn't seen Google Docs weaponized like that before.
@_rdowd@JSemonSecurity and @threatresearch spent some time hunting everything down and it turned out a little more interesting than I previously thought.
We never got that linux lure though 🤣
huntress.com/blog/defcon-phi…
Search: “clear disk space on macOS”
Click: legit ChatGPT convo
Paste: “safe” Terminal command
Boom: AMOS infostealer installed
@stuartjash & @JSemonSecurity break down how Attackers are hijacking ChatGPT + Grok to deliver malware. huntress.com/blog/amos-steal…
As of Thurs Aug 14th we're seeing clear indications that a threat actor has now weaponised and is exploiting vulnerabilities in Axis camera software (CVE-2025-30023/4/5/6) which was presented at DEFCON. Props to @Cyber4a53 for find.
axis.com/dam/public/9b/a5/72…
CC: @HuntressLabs
👇
👀 DPRK threat actors are now using deepfakes and fake Zoom links to socially engineer macOS users.
Starts with a Telegram message. Ends with AppleScript. Targets crypto wallets.
Macs don't get viruses?
📖 by @stuartjash & @birchb0y & Jonathan Semon huntress.com/blog/inside-blu…