Fake Crypto Conference Invitations Used to Target Cybersecurity Researchers

Attackers have been using fake crypto conference invitations to target cybersecurity researchers. A phishing campaign was reported by Huntress, a cybersecurity firm, which used public and private messages on social network X to find potential victims.

The attackers posed as representatives of a well-known cryptocurrency media outlet and sent legitimate-looking Google Docs files that contained a sidebar claiming the document's contents were protected by encryption.

When users attempted to decrypt the file, they were asked to enter a decryption key provided by the attacker, which would trigger the next stage of the attack. The subsequent scenario depended on the operating system of the victim's device.

For macOS devices, the attackers prepared a data stealer, while for Windows devices, they used a remote desktop viewing tool modified for malicious purposes. Windows users could also be offered a fake installer for the Ledger crypto wallet.