NewsDialy
A hacker posing as a staff member at a leading cryptocurrency news website used Google Docs to plant malware on the machines of several cybersecurity professionals.
Malware, software built to infiltrate or damage a system without the owner's knowledge, arrived here wrapped in an invitation to a fake crypto conference, a pretext designed to look routine to researchers who move in and out of such events regularly.
Google Docs is a trusted platform, and using it as a delivery vehicle lets an attacker sidestep the wariness that an unsolicited email attachment might trigger.
The target opens what looks like a shared document from a credible-seeming sender and receives a malicious file instead of whatever was promised. The choice of targets was deliberate.
Keep reading