Title |
Published |
Tags |
Description |
Number of indicators |
HZ Rat backdoor for macOS harvests data from WeChat and DingTalk |
Aug. 27, 2024, 3:12 p.m. |
|
A version of the HZ Rat backdoor targeting users of China’s WeChat and DingTalk was uploaded to VirusTotal in July 2023 and was n… |
10 |
From the Depths: Analyzing the Cthulhu Stealer Malware for macOS |
Aug. 23, 2024, 9:17 a.m. |
|
This report analyzes Cthulhu Stealer, a malware-as-a-service targeting macOS users to steal credentials and cryptocurrency wallet… |
9 |
TodoSwift Disguises Malware Download Behind Bitcoin PDF |
Aug. 19, 2024, 1:35 p.m. |
|
This report details a macOS threat actor likely originating from North Korea that employs a dropper application written in Swift/… |
7 |
Beyond the wail: deconstructing the BANSHEE infostealer |
Aug. 16, 2024, 2:10 p.m. |
|
This analysis details the BANSHEE malware, a macOS-based infostealer that targets system information, browser data, and cryptocur… |
2 |
InfoStealer Uses SwiftUI, OpenDirectory API to Capture Passwords |
Aug. 9, 2024, 11:26 a.m. |
|
This report analyzes a new macOS stealer malware that leverages SwiftUI for password prompts and the OpenDirectory API for verify… |
1 |
Fake Microsoft Teams for Mac delivers Atomic Stealer |
July 12, 2024, 6:21 p.m. |
|
A malvertising campaign lures Mac users into downloading a counterfeit Microsoft Teams installer containing Atomic Stealer, a dat… |
6 |
Self-Proclaimed Meeting Software Vortax Spreads Infostealers, Unveils Expansive Network of Malicious macOS Applications |
June 20, 2024, 12:26 p.m. |
|
While monitoring data in Recorded Future Malware Intelligence, Insikt Group identified purported virtual
meeting software called … |
60 |
LightSpy: Implant for macOS |
May 30, 2024, 11:29 a.m. |
|
A technical analysis reveals details about LightSpy, a sophisticated surveillance framework that targeted macOS devices using pub… |
43 |
macOS Cuckoo Stealer | Ensuring Detection and Defense as New Samples Rapidly Emerge |
May 10, 2024, 8:31 a.m. |
|
This analysis discusses the emergence of a new macOS malware family called 'Cuckoo Stealer', which acts as an infostealer and spy… |
4 |
macOS Adload Pivots Just Days After Apple’s XProtect Clampdown |
May 1, 2024, 8 p.m. |
|
The report analyzes a new variant of the Adload adware that evades Apple's recent XProtect malware signature updates. Despite App… |
11 |
LightSpy Malware Variant Targeting macOS |
April 29, 2024, 6:41 p.m. |
|
This report details the discovery of a macOS variant of the LightSpy malware, previously known to target iOS and Android devices.… |
12 |