North Korea targets macOS users in latest heist
… First, it launches a command that invokes the legitimate macOS softwareupdate binary - but with an invalid parameter. This essentially does nothing but launch a trusted Apple‑signed process to make the software update look legitimate. …