SlowMist Chief Information Security Officer 23pds reminds that Lazarus Group has newly released a macOS native malicious toolkit called “Mach-O Man,” primarily targeting crypto users and executives. Such attacks generally do not roll out on a large scale and are more geared toward targeted phishing; once compromised, the losses are often concentrated. In short, they are shifting from “scanning networks” to “tracking individuals,” while using system-level tools—making defense more difficult.