Hackers tricked security experts at major conferences using a fake Google document

During August 2026's Black Hat and DEF CON conferences, an attacker sent security professionals a real Google Doc with a fake password-recovery tool. Typing in the provided password secretly installed malicious software — one type stealing data from Macs, another giving remote control of Windows PCs. Huntress disclosed it August 19. TechCrunch called the trick more convincing than prior government-backed attempts.