[v8dev123]

All these attacks usually caused by two things, office macros and mimikatz.

[rurban]

Easier: Microsoft Windows

[v8dev123]

I re-call the Russians did a full featured malware for macOS called Proton. You may find videos of that in Youtube.

Of course, Macros works in macOS too if the user has installed Microsoft Office

[trompetenaccoun]

The government needs to finally ban Windows. In addition to being insecure it's used by many criminals for their scams and blackmail operations.