Calendar Meeting Links Used to Spread Mac Malware

**Campaign summary:** Attackers impersonated cryptocurrency investors on Telegram and abused Calendly event links to trick targets into running a downloaded AppleScript on macOS that fetched a trojan; reporting links this activity to the North Korean BlueNoroff/Lazarus group and lists associated domains and an IP used in the campaign, plus guidance from Calendly and vendors on detection and mitigation.