North Korea-linked threat actors spread macOS NimDoor malware via fake Zoom updates

Victims are tricked into installing the malware through phishing links sent via Calendly or Telegram. NimDoor is written in Nim, uses encrypted communications, and steals data like browser history and Keychain credentials.