cybercrime.clubhttps://cybercrime.club/tags/threat-actor/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usFri, 29 May 2026 23:09:40 -0400JINX-0164: Fake Recruiters, a macOS RAT, and a Pivot Into Code Distribution Pipelineshttps://cybercrime.club/posts/jinx-0164-audiofix-macos-rat-cicd-crypto-theft/Fri, 29 May 2026 23:09:40 -0400https://cybercrime.club/posts/jinx-0164-audiofix-macos-rat-cicd-crypto-theft/Wiz details JINX-0164, a financially motivated actor that uses LinkedIn recruiter lures to drop the AUDIOFIX macOS RAT, then moves from developer laptops into code distribution and CI/CD infrastructure.Supply Chain