MALWARE ATTACK AND COUNTERATTACK

Summary from the TLDR InfoSec newsletter

Artist Antoine Schmitt describes a phishing attack that he was a victim of which led to installing the AMOS infostealer. Schmitt was contacted by a threat actor masquerading as a very professional journalist for a magazine called Artscope Magazine. The journalist had Schmitt download and install a trojanized video app that executed an AppleScript payload to download and run the infostealer.