Crypto Investment Companies Targeted Via Telegram

Microsoft warns that threat actor DEV-0139 targets cryptocurrency investment companies using Telegram groups to access the VIP customers of those companies. Attackers attempt to gain the trust of the victims using their broad crypto knowledge and invite them to the other Telegram group asking for feedback and sending them an Excel file. If the user opens the file and enables macros, the backdoor will get installed on their system. Read more...