The North Korean hacker group BlueNoroff has been linked to a new malware targeting cryptocurrency firms, specifically affecting MacOS systems. According to reports, the malware is activated when a user downloads and opens a decoy PDF file, which subsequently downloads the malware to the MacOS desktop in the background. This allows the attackers to remotely access the victim's computer and steal sensitive information. BlueNoroff has been active since 2019, conducting various phishing and cybersecurity attacks. The operation has been identified as 'Hidden Risk' by SentinelLabs, highlighting ongoing concerns regarding the security of crypto firms in the face of increasing cyber threats.