Script Editor: Alternative Attack Vector for ClickFix
Script Editor is used in some ClickFix campaigns to avoid Terminal paste warnings, as documented by Jamf Threat Labs.
Tag: macOS
Moonlock Lab Research
Moonlock Lab tracked macOS stealers that perform similar swap attacks on cryptocurrency wallets, providing context for the OkoBot campaign.
CrashStealer macOS Malware Uses Notarized Dropper to Bypass Gatekeeper and Steal Sensitive Data
Cybersecurity researchers at Jamf Threat Labs have uncovered a new macOS information stealer named CrashStealer, which uses a signed and Apple-notarized dropper…
CrashStealer: macOS Stealer
CrashStealer is a macOS stealer that collects sensitive information from infected systems. AmnesiaStealer is noted to have similar goals but with additional…
Fake 7-Zip Installers Recruit Devices into Lurking Lizard Proxy Botnet
Cybersecurity researchers at Infoblox have uncovered a threat actor tracked as Lurking Lizard, operating an end-to-end malicious residential proxy business since at…
WireVPN: Malicious VPN App Used in Proxy Botnet Campaign
WireVPN is a malware-laced VPN application used by Lurking Lizard to recruit devices into a residential proxy botnet. Available on Android, macOS,…
Quima Control: The Core Remote Administration Tool of the Quima Suite
Quima Control, also known as QuimaRAT, is a remote administration tool with 74 Windows and 46 macOS and Linux modules. It is…
New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS
Cybersecurity researchers at LevelBlue have identified a new Java-based remote access trojan (RAT) named QuimaRAT, which is capable of targeting Windows, Linux,…
QuimaRAT: A New Java-Based Cross-Platform Remote Access Trojan
QuimaRAT is a Java-based remote access trojan (RAT) advertised under a malware-as-a-service (MaaS) model, capable of targeting Windows, Linux, and macOS. It…
PamStealer macOS Malware Uses Fake Maccy Sites and PAM Checks to Steal Login Passwords
Cybersecurity researchers at Jamf Threat Labs have discovered a new macOS information stealer named PamStealer that uses sophisticated techniques to infect systems…