Someone targeted security researchers using a fake crypto conference as a lure

A hacker posing as an employee of a prominent cryptocurrency news outlet has targeted several cybersecurity professionals by using Google Docs to deliver malware. The attackers embedded malicious code into seemingly legitimate documents shared via the popular cloud‑based platform, exploiting the trust that recipients place in the news site’s brand. Once opened, the documents triggered the download of malware designed to compromise the victim’s system and potentially exfiltrate sensitive information.

Security researchers have traced the operation to a sophisticated phishing campaign that leveraged the news site’s domain name and internal email addresses to appear authentic. The malware was engineered to evade detection by standard antivirus solutions, using obfuscation techniques that bypass signature‑based defenses. The incident underscores the growing risk of supply‑chain attacks in the cryptocurrency sector, where insiders and trusted partners are increasingly used as vectors for malicious activity.

Investigators are currently working with the affected organizations to contain the breach and assess the extent of data loss. The cryptocurrency news outlet has issued a statement confirming the compromise of its internal communications and is cooperating with law enforcement. The incident serves as a reminder for cybersecurity professionals to verify the authenticity of documents and maintain robust endpoint protection against evolving threats.