Security experts targeted by fake crypto conference in scam to hand over details

Date:
Fri, 21 Aug 2026 13:20:22 +0000

Description:
Cybersecurity pros attending conferences are being targeted with AMOS and other infostealers, experts warn.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Huntress spotted a ClickFix campaign targeting security pros via fake conference invites Victims tricked into pasting code that installs AMOS infostealer on macOS If lured, isolate systems, reset credentials, rotate secrets, and review cryptocurrency wallets Cybercriminals are targeting security professionals with a highly tailored ClickFix campaign in an attempt to get their computers infected with infostealer malware , experts have warned.

An active campaign against people who have attended, or have a history of attending, various cybersecurity conferences such as Black Hat, or DEF CON
has been detetced by security researchers Huntress , who were targets themselves. The attack starts on X, where the threat actor uses a fake
account to interact with people visiting and sharing content from these conferences. After establishing rapport, they move into DMs, claiming theyre organizing a conference of their own, and sharing a Google Docs file containing more info with the victim. Latest Videos From TechRadar Watch full video here: Follow-up attack Here is where the attackersy go for the ClickFix attack. The document comes with a vertical sidebar, apparently as a security feature that keeps the contents of the file encrypted. The victim is given a decryption code to enter, but it returns an error and offers a solution - to bring up the Terminal and copy/paste a piece of code.

From here, its the usual ClickFix practice: the victim ends up downloading
and running AMOS, a notorious Mac infostealer capable of grabbing browser information, cookies, keychain data, cryptocurrency wallet information, Telegram files, and more. The Windows variant did not work when Huntress
tried to analyze it, but its safe to assume the end goal is the same. You may like Experts warn this fake Claude install guide can be used to empty crypto wallets Experts warn Claude feature hijacked by hackers to launch major malware campaign ClickLock Stealer tries to trick macOS users into revealing their passwords

Huntress also found that this is not where the attack ends. If the victim
does not install the infostealer, the threat actor will follow up with a different document, this time pretending to be for Dropbox and working only with the desktop app. Of course, the download button leads straight back to the infostealer.

The researchers shared a full list of Indicators of Compromise (IoC) which
can be found on this link. They also advised anyone who interacted with this kind of lure to isolate the system from the network, collect relevant
forensic evidence, and consider reimaging the system. Are you a pro?
Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get
all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting
your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Assume that credentials on the system have been compromised, they said.
Revoke active sessions, reset passwords, and rotate API keys or any other secrets that may reside on the system. Review cryptocurrency wallets as well, if present. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/security-experts-targeted-by-fake-crypt o-conference-in-scam-to-hand-over-details


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)