Arstechnica take on this story:

https://arstechnica.com/information-technology/2021/01/north...

This is a pretty decent social engineering attack, I'm actually kind of impressed at the long-con set up. Shows that nearly anyone can be compromised merely through dedicated social engineering.

Pretty clever attack. The attackers were able to install an in-memory backdoor on a fully patched Windows 10. I saw more than a couple researchers on my twitter that were affected.