Mur d'images - Cyberveille

curated by Decio

macOS Vulnerabilities: A Year of Security Research at Kandji

PasivRobber: Chinese Spyware or Security Tool?

TCCing is Believing

An Update on Fake Updates: Two New Actors, and New Mac Malware

PoC Exploit Released for macOS Kernel Vulnerability CVE-2025-24118 (CVSS 9.8)

macOS FlexibleFerret | Further Variants of DPRK Malware Family Unearthed

10,000 WordPress Websites Found Delivering MacOS and Windows Malware

2024 macOS Malware Review | Infostealers, Backdoors, and APT Campaigns Targeting the Enterprise

Banshee: The Stealer That "Stole Code" From MacOS XProtect

Cracking the Code: How Banshee Stealer Targets macOS Users

Microsoft: macOS bug lets hackers install malicious kernel drivers

What a new threat report says about Mac malware in 2024

Moonlock's 2024 macOS threat report

Meeten Malware: A Cross-Platform Threat to Crypto Wallets on macOS and Windows

Lateral Movement on macOS: Unique and Popular Techniques and In-the-Wild Examples

Apple fixes two zero-days used in attacks on Intel-based Macs

Uncovering Apple Vulnerabilities: The diskarbitrationd and storagekitd Audit Story Part 1

North Korean hackers employ new tactics to compromise crypto-related businesses - Help Net Security

BlueNoroff Hidden Risk | Threat Actor Targets Macs with Fake Crypto News and Novel Persistence

Update your iPhone, Mac, Watch: Apple issues patches for several vulnerabilities | Malwarebytes

macOS NotLockBit | Evolving Ransomware Samples Suggest a Threat Actor Sharpening Its Tools

New macOS malware HZ RAT lets attackers control Macs remotely

Docker-OSX image used for security research hit by Apple DMCA takedown

HZ Rat backdoor for macOS harvests data from WeChat and DingTalk

Cthulhu Stealer malware aimed to take macOS user data

From the Depths: Analyzing the Cthulhu Stealer Malware for macOS

How multiple vulnerabilities in Microsoft apps for macOS pave the way to stealing permissions

Beyond the wail: deconstructing the BANSHEE infostealer

The Hidden Treasures of Crash Reports

Malicious Python Package Targets macOS Developers

OpenAI’s ChatGPT Mac app was storing conversations in plain text

3 million iOS and macOS apps were exposed to potent supply-chain attacks

Vulnerabilities in CocoaPods Open the Door to Supply Chain Attacks Against Thousands of iOS and MacOS Applications

PoC Exploit Released For macOS Privilege Escalation Vulnerability

Malicious PyPI packages targeting highly specific MacOS machines

An Infostealer's Brewin': Cuckoo & AtomicStealer Get Creative

Malicious Go Binary Delivered via Steganography in PyPI

macOS Adload | Prolific Adware Pivots Just Days After Apple’s XProtect Clampdown

Bringing process injection into view(s): exploiting all macOS apps using nib files · Sector 7

Infostealers continue to pose threat to macOS users

How AMOS macOS Stealer Avoids Detection

Jamf says 9% of smartphone have fallen for phishing attacks

New MacOS Backdoor Written in Rust Shows Possible Link with Windows Ransomware Group

New RustDoor macOS malware impersonates Visual Studio update

A backdoor with a cryptowallet stealer inside cracked macOS software

Jamf Threat Labs Discovers Pirated macOS Apps Similar to ZuRu Malware

Why Join The Navy If You Can Be A Pirate?

The Many Faces of Undetected macOS InfoStealers | KeySteal, Atomic & CherryPie Continue to Adapt

MacOS info-stealers quickly evolve to evade XProtect detection

Analyzing DPRK's SpectralBlur

Objective-See's Blog

Exploiting GOG Galaxy XPC service for privilege escalation in macOS

Imperva Uncovers CVE-2023-22524, A RCE Vulnerability

Apple Releases Security Updates to Patch Critical iOS and macOS Security Flaws

Analysis of a new macOS Trojan-Proxy

N. Korean Hackers 'Mixing' macOS Malware Tactics to Evade Detection

DPRK Crypto Theft | macOS RustBucket Droppers Pivot to Deliver KandyKorn Payloads

Atomic Stealer distributed to Mac users via fake browser updates

Apple neglects to patch multiple critical vulnerabilities in macOS

Jamf Threat Labs Discovers Malware from BlueNoroff

Elastic catches DPRK passing out KANDYKORN — Elastic Security Labs

Triangulation: validators, post-compromise activity and modules | Securelist

Hackers can force iOS and macOS browsers to divulge passwords and much more

macOS MetaStealer | New Family of Obfuscated Go Infostealers Spread in Targeted Attacks

Last Week on My Mac: How quickly can Apple release a security update?

Mac users targeted in new malvertising campaign delivering Atomic Stealer

Developers Warned of Malicious PyPI, NPM, Ruby Packages Targeting Macs - SecurityWeek

Nascent Malware Campaign Targets npm, PyPI, and RubyGems Developers

Is macOS’s new XProtect behavioural security preparing to go live?

How NightOwl for Mac Added a Botnet

XLoader's Latest Trick | New macOS Variant Disguised as Signed OfficeNote App

Mac systems turned into proxy exit nodes by AdLoad

An Apple Malware-Flagging Tool Is ‘Trivially’ Easy to Bypass

Apple Crimeware | Massive Rust Infostealer Campaign Aiming for macOS Sonoma Ahead of Public Release

ShadowVault is the latest Mac data-stealer malware, reportedly

Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation

Apple confirms WebKit security updates break browsing on some sites

Apple releases emergency update to fix zero-day exploited in attacks

BlueNoroff | How DPRK’s macOS RustBucket Seeks to Evade Analysis and Detection -

Emerging Threat! Exposing JOKERSPY

New macOS vulnerability, Migraine, could bypass System Integrity Protection | Microsoft Security Blog

Apple fixes three new zero-days exploited to hack iPhones, Macs

How macOS now tracks the provenance of apps

Snake: Coming soon in Mac OS X flavour – Fox-IT International blog

Atomic Stealer | Threat Actor Spawns Second Variant of macOS Malware Sold on Telegram

Apple uses iOS and macOS Rapid Security Response feature for the first time

Cyble — Threat Actor Selling New Atomic macOS (AMOS) Stealer on Telegram

'RustBucket' malware targets macOS

LockBit for Mac | How Real is the Risk of macOS Ransomware?

Analyzing an arm64 mach-O version of LockBit

Apple fixes two zero-days exploited to hack iPhones and Macs

Mac Malware MacStealer Spreads as Fake P2E Apps

Ironing out (the macOS details) of a Smooth Operator

MacStealer: New macOS-based Stealer Malware Identified

Session Cookies, Keychains, SSH Keys and More | 7 Kinds of Data Malware Steals from macOS Users

A Fake Project Related to the Sandbox Malspam

Hunting for Honkbox | Multistage macOS Cryptominer May Still Be Hiding

Hard-to-spot Mac crypto-mining threat, XMRig, hits Pirate Bay

Beware of macOS cryptojacking malware.

Can you rely on macOS Ventura for malware protection?

7 Ways Threat Actors Deliver macOS Malware in the Enterprise

How do you know when macOS detects and remediates malware?

The Mac Malware of 2022 👾

Shlayer Malware: Continued Use of Flash Updates

Shlayer malware abusing Gatekeeper bypass on macOS

L’art de l’évasion How Shlayer hides its configuration inside Apple proprietary DMG files

Top 10 macOS Malware Discoveries in 2022

Cryptex: how a custom iPhone is changing macOS updates – The Eclectic Light Company

Attacking Apple's Neural Engine

Last Week on My Mac: Home truths about macOS

Apple's Poor Patching Policies Potentially Make Users' Security and Privacy Precarious

Unmasking WindTape - Speaker Deck

Reverse Engineering the Apple MultiPeer Connectivity Framework

Jamf Threat Labs identifies macOS Archive Utility vulnerability allowing for Gatekeeper bypass (CVE-2022-32910)

Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto

The Apple security landscape: Moving into the world of enterprise risk

Apple Kills Passwords in iOS 16 and macOS Ventura | WIRED

XCSSET Malware Update | macOS Threat Actors Prepare for Life Without Python

New macOS malware 'CloudMensis' detected and prevented

North Korean hackers use signed macOS malware to target IT job seekers

Zoom’s latest update on Mac includes a fix for a dangerous security flaw

You're M̶u̶t̶e̶d̶ Rooted

Last Week on My Mac: Is your Mac still secure from malware?

Investigation report about the abuse of the Mac Appstore | by Privacy1St

I see what you did there: A look at the CloudMensis macOS spyware

Uncovering a macOS App Sandbox escape vulnerability: A deep dive into CVE-2022-26706 - Microsoft Security Blog

Last Week on My Mac: Introducing XProtect Remediator, successor to MRT – The Eclectic Light Company

Apple has pushed a silent Mac update to remove hidden Zoom web server

Gimmick MacOS Malware Spreads Through Customized Files, Enables MacOS CodeSign Bypass - CloudSEK

Malicious PyPI package opens backdoors on Windows, Linux, and Macs

Exploiting an Unbounded memcpy in Parallels Desktop

macOS Vulnerabilities Hiding in Plain Sight (Black Hat Asia 2022 presentation)

Known macOS Vulnerabilities Led Researcher to Root Out New Flaws

From the Front Lines | Unsigned macOS oRAT Malware Gambles For The Win

MacOS Two-machine Kernel Debugging

OverWatch Insights: Reviewing a New Intrusion Targeting Mac Systems

What does APT Activity Look Like on MacOS?

Jamf Threat Labs identifies Safari vulnerability (CVE-2022-22616) allowing for Gatekeeper bypass

Increased Enterprise Use of iOS, Mac Means More Malware

MacOS SUHelper Root Privilege Escalation Vulnerability A Deep Dive Into CVE-2022-22639

Apple releases macOS 12.3.1, iOS 15.4.1, watchOS 8.5.1 and more - The Mac Security Blog

Storm Cloud on the Horizon: GIMMICK Malware Strikes at macOS

Objective-See's Blog

Analyzing a watering hole campaign using macOS exploits

Watering hole deploys new macOS malware, DazzleSpy, in Asia

SysJoker : un malware pour macOS, Windows et Linux qui opère discrètement depuis des mois

New SysJoker Backdoor Targets Windows, Linux, and macOS

SysJoker analyzing the first (macOS) malware of 2022!

Why is the Zoom app listening on my microphone...