The attackers pose as venture capital professionals, building trust before guiding victims to use Obsidian as a fake company dashboard. Once access is granted, the malware is deployed and gains full remote control over the system, targeting both Windows and macOS users.

For crypto and finance professionals, the lesson is clear: even legitimate productivity tools can become attack vectors. Being cautious with plugins, verifying sources, and avoiding unsolicited collaboration requests are now essential steps in protecting digital assets and sensitive data.