Mur d'images - Cyberveille

curated by Decio

Bringing process injection into view(s): exploiting all macOS apps using nib files · Sector 7

Infostealers continue to pose threat to macOS users

How AMOS macOS Stealer Avoids Detection

Jamf says 9% of smartphone have fallen for phishing attacks

New MacOS Backdoor Written in Rust Shows Possible Link with Windows Ransomware Group

New RustDoor macOS malware impersonates Visual Studio update

A backdoor with a cryptowallet stealer inside cracked macOS software

Jamf Threat Labs Discovers Pirated macOS Apps Similar to ZuRu Malware

Why Join The Navy If You Can Be A Pirate?

The Many Faces of Undetected macOS InfoStealers | KeySteal, Atomic & CherryPie Continue to Adapt

MacOS info-stealers quickly evolve to evade XProtect detection

Analyzing DPRK's SpectralBlur

Objective-See's Blog

Exploiting GOG Galaxy XPC service for privilege escalation in macOS

Imperva Uncovers CVE-2023-22524, A RCE Vulnerability

Apple Releases Security Updates to Patch Critical iOS and macOS Security Flaws

Analysis of a new macOS Trojan-Proxy

N. Korean Hackers 'Mixing' macOS Malware Tactics to Evade Detection

DPRK Crypto Theft | macOS RustBucket Droppers Pivot to Deliver KandyKorn Payloads

Atomic Stealer distributed to Mac users via fake browser updates

Apple neglects to patch multiple critical vulnerabilities in macOS

Jamf Threat Labs Discovers Malware from BlueNoroff

Elastic catches DPRK passing out KANDYKORN — Elastic Security Labs

Triangulation: validators, post-compromise activity and modules | Securelist

Hackers can force iOS and macOS browsers to divulge passwords and much more

macOS MetaStealer | New Family of Obfuscated Go Infostealers Spread in Targeted Attacks

Last Week on My Mac: How quickly can Apple release a security update?

Mac users targeted in new malvertising campaign delivering Atomic Stealer

Developers Warned of Malicious PyPI, NPM, Ruby Packages Targeting Macs - SecurityWeek

Nascent Malware Campaign Targets npm, PyPI, and RubyGems Developers

Is macOS’s new XProtect behavioural security preparing to go live?

How NightOwl for Mac Added a Botnet

XLoader's Latest Trick | New macOS Variant Disguised as Signed OfficeNote App

Mac systems turned into proxy exit nodes by AdLoad

An Apple Malware-Flagging Tool Is ‘Trivially’ Easy to Bypass

Apple Crimeware | Massive Rust Infostealer Campaign Aiming for macOS Sonoma Ahead of Public Release

ShadowVault is the latest Mac data-stealer malware, reportedly

Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation

Apple confirms WebKit security updates break browsing on some sites

Apple releases emergency update to fix zero-day exploited in attacks

BlueNoroff | How DPRK’s macOS RustBucket Seeks to Evade Analysis and Detection -

Emerging Threat! Exposing JOKERSPY

New macOS vulnerability, Migraine, could bypass System Integrity Protection | Microsoft Security Blog

Apple fixes three new zero-days exploited to hack iPhones, Macs

How macOS now tracks the provenance of apps

Snake: Coming soon in Mac OS X flavour – Fox-IT International blog

Atomic Stealer | Threat Actor Spawns Second Variant of macOS Malware Sold on Telegram

Apple uses iOS and macOS Rapid Security Response feature for the first time

Cyble — Threat Actor Selling New Atomic macOS (AMOS) Stealer on Telegram

'RustBucket' malware targets macOS

LockBit for Mac | How Real is the Risk of macOS Ransomware?

Analyzing an arm64 mach-O version of LockBit

Apple fixes two zero-days exploited to hack iPhones and Macs

Mac Malware MacStealer Spreads as Fake P2E Apps

Ironing out (the macOS details) of a Smooth Operator

MacStealer: New macOS-based Stealer Malware Identified

Session Cookies, Keychains, SSH Keys and More | 7 Kinds of Data Malware Steals from macOS Users

A Fake Project Related to the Sandbox Malspam

Hunting for Honkbox | Multistage macOS Cryptominer May Still Be Hiding

Hard-to-spot Mac crypto-mining threat, XMRig, hits Pirate Bay

Beware of macOS cryptojacking malware.

Can you rely on macOS Ventura for malware protection?

7 Ways Threat Actors Deliver macOS Malware in the Enterprise

How do you know when macOS detects and remediates malware?

The Mac Malware of 2022 👾

Shlayer Malware: Continued Use of Flash Updates

Shlayer malware abusing Gatekeeper bypass on macOS

L’art de l’évasion How Shlayer hides its configuration inside Apple proprietary DMG files

Top 10 macOS Malware Discoveries in 2022

Cryptex: how a custom iPhone is changing macOS updates – The Eclectic Light Company

Attacking Apple's Neural Engine

Last Week on My Mac: Home truths about macOS

Apple's Poor Patching Policies Potentially Make Users' Security and Privacy Precarious

Unmasking WindTape - Speaker Deck

Reverse Engineering the Apple MultiPeer Connectivity Framework

Jamf Threat Labs identifies macOS Archive Utility vulnerability allowing for Gatekeeper bypass (CVE-2022-32910)

Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto

The Apple security landscape: Moving into the world of enterprise risk

Apple Kills Passwords in iOS 16 and macOS Ventura | WIRED

XCSSET Malware Update | macOS Threat Actors Prepare for Life Without Python

New macOS malware 'CloudMensis' detected and prevented

North Korean hackers use signed macOS malware to target IT job seekers

Zoom’s latest update on Mac includes a fix for a dangerous security flaw

You're M̶u̶t̶e̶d̶ Rooted

Last Week on My Mac: Is your Mac still secure from malware?

Investigation report about the abuse of the Mac Appstore | by Privacy1St

I see what you did there: A look at the CloudMensis macOS spyware

Uncovering a macOS App Sandbox escape vulnerability: A deep dive into CVE-2022-26706 - Microsoft Security Blog

Last Week on My Mac: Introducing XProtect Remediator, successor to MRT – The Eclectic Light Company

Apple has pushed a silent Mac update to remove hidden Zoom web server

Gimmick MacOS Malware Spreads Through Customized Files, Enables MacOS CodeSign Bypass - CloudSEK

Malicious PyPI package opens backdoors on Windows, Linux, and Macs

Exploiting an Unbounded memcpy in Parallels Desktop

macOS Vulnerabilities Hiding in Plain Sight (Black Hat Asia 2022 presentation)

Known macOS Vulnerabilities Led Researcher to Root Out New Flaws

From the Front Lines | Unsigned macOS oRAT Malware Gambles For The Win

MacOS Two-machine Kernel Debugging

OverWatch Insights: Reviewing a New Intrusion Targeting Mac Systems

What does APT Activity Look Like on MacOS?

Jamf Threat Labs identifies Safari vulnerability (CVE-2022-22616) allowing for Gatekeeper bypass

Increased Enterprise Use of iOS, Mac Means More Malware

MacOS SUHelper Root Privilege Escalation Vulnerability A Deep Dive Into CVE-2022-22639

Apple releases macOS 12.3.1, iOS 15.4.1, watchOS 8.5.1 and more - The Mac Security Blog

Storm Cloud on the Horizon: GIMMICK Malware Strikes at macOS

Objective-See's Blog

Analyzing a watering hole campaign using macOS exploits

Watering hole deploys new macOS malware, DazzleSpy, in Asia

SysJoker : un malware pour macOS, Windows et Linux qui opère discrètement depuis des mois

New SysJoker Backdoor Targets Windows, Linux, and macOS

SysJoker analyzing the first (macOS) malware of 2022!

Why is the Zoom app listening on my microphone...