Hackers are targeting MacOS users with this updated malware

guest · Nov 30, 2020

Hackers are targeting MacOS users with this updated malware
November 30, 2020
https://www.zdnet.com/article/hackers-are-targeting-macos-users-with-this-updated-malware/

A newly discovered form of malware is targeting Apple MacOS users in a campaign which researchers say is tied to a nation-state backed hacking operation.

The campaign has been detailed by cybersecurity analysts at Trend Micro who've linked it to OceanLotus – also known as APT32 – a hacking group which is thought to have links to the Vietnamese government.
The MacOS backdoor provides the attackers with a window into the compromised machine, enabling them to snoop on and steal confidential information and sensitive business documents.
Click to expand...

The attack could potentially give itself away if users are paying attention because when the malicious file is run, a Microsoft Word document doesn't appear.

However, at this stage an initial payload is already working on the machine and it changes access permissions in order to load a second-stage payload which then prompts the installation of a third-stage payload - which downloads the backdoor onto the system. By installing the malware across different stages like this OceanLotus aims to evade detection.

"Threat groups such as OceanLotus are actively updating malware variants in attempts to evade detection and improve persistence," wrote researchers.
Click to expand...

Trend Micro: New MacOS Backdoor Connected to OceanLotus Surfaces

We recently discovered a new backdoor we believe to be related to the OceanLotus group. Some of the updates of this new variant (detected by Trend Micro as Backdoor.MacOS.OCEANLOTUS.F) include new behavior and domain names. As of writing, this sample is still undetected by other antimalware solutions.
Click to expand...

Log in or Sign up

Hackers are targeting MacOS users with this updated malware

guest Guest

Log in or Sign up

Hackers are targeting MacOS users with this updated malware

guest Guest

Useful Searches