New Social Engineering Attack Targets Crypto and Finance Users

A new social engineering attack has been identified, targeting users in the cryptocurrency and finance sectors. According to PANews, Elastic Security Labs discovered that attackers are exploiting the community plugin feature of the note-taking application Obsidian to distribute malware capable of controlling victims' devices. The attackers employ sophisticated social engineering tactics via LinkedIn and Telegram, posing as venture capital firms. They create a business context centered around financial services, particularly cryptocurrency liquidity solutions, to lure victims into opening a cloud-hosted library controlled by the attackers in Obsidian and enabling community plugin synchronization. The malicious plugin then silently executes the attack chain.