Flurry of new Mac malware drops in December

guest · Dec 13, 2018

Flurry of new Mac malware drops in December
December 11, 2018
https://blog.malwarebytes.com/threat-analysis/2018/12/flurry-new-mac-malware-drops-december/

A Word document with a malicious macro
Lambert identified a malicious Microsoft Word document containing a malicious Visual Basic macro in a Tweet that provided a VirusTotal link to the file. Wardle analyzed the document, which was named BitcoinMagazine-Quidax_InterviewQuestions_2018.docm, and the payload that it dropped.

On Friday, Adam Thomas found a malicious copy of Discord, an app for gamers to communicate with other gamers. However, this copy of Discord didn’t seem to do anything, because it was actually an Automator script that did nothing for the user.
Interesting similarities
There are some interesting similarities between this fake Discord malware, which Malwarebytes detects as OSX.LamePyre, and the OSX.DarthMiner malware discovered earlier this week. Both are distributed in the form of Automator applets, both applets run Python scripts, and both use an EmPyre backdoor.
Another macOS threat is OSX.BadWord, named so by Malwarebytes and discovered by John Lambert, Microsoft Threat Intelligence Center engineer. [...]
Click to expand...

Log in or Sign up

Flurry of new Mac malware drops in December

guest Guest

Log in or Sign up

Flurry of new Mac malware drops in December

guest Guest

Useful Searches