macOS, malware and Microsoft

Microsoft warns that the powerful XCSSET macOS malware is back with new tricks
Microsoft said it has detected a new variant of XCSSET, a powerful macOS malware family that has targeted developers and users since at least 2020.
Updated macOS malware variant uncovered by Microsoft
Microsoft has observed a once formant macOS malware that has now began targeting Apple’s Xcode platform in a new, more enhanced variant. The Latest Tech News, Delivered to Your Inbox
New Mac malware 'FrigidStealer' spreads through fake browser updates
Cybercriminals are ramping up their use of fake software updates to distribute malware, and Mac users are in the crosshairs with a new strain.
These fake macOS updates are actually just looking to spread malware
They opted for the “fake update” distribution method, where victims would visit a compromised website which would serve a popup. That popup would warn users that they needed to update either their Macs, or their browsers, in order to view the contents of the website.
New Mac Malware Poses as Browser Updates
Researchers warn of rising macOS-targeted attacks as hackers exploit fake updates to bypass security. FrigidStealer malware highlights growing enterprise risks.
New FrigidStealer macOS Malware Distributed as Fake Browser Update
A recently identified macOS infostealer named FrigidStealer has been distributed through a compromised website, as a fake browser update.
Microsoft Sounds Alarm On New Mac Malware; Key Details Every User Needs To Know
One of the most troubling aspects of this new malware is how much better it hides its true intentions. Microsoft reports that the malware now uses a more advanced method for generating payloads within Xcode projects.
Microsoft spies a new and worrying macOS malware strain
The XCSSET infostealer was updated after more than two years, and now comes with new persistence and obfuscation mechanisms.
New FrigidStealer Malware Targets macOS Users via Fake Browser Updates
TA2726, per the enterprise security firm, acts as a TDS for TA2727 and another threat actor called TA569, which is responsible for the distribution of a JavaScript-based loader malware referred to as SocGholish (aka FakeUpdates) that often masquerades as a browser update on legitimate-but-compromised sites.
XCSSET macOS malware reappears with new attack strategies, Microsoft sounds alarm
The updated malware, which spreads via infected Xcode projects, introduces advanced evasion tactics and persistence mechanisms to bypass security defenses.
The Hacker News1d
Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation Tactics
Microsoft discovers new XCSSET macOS malware variant with enhanced obfuscation, persistence, and infection strategies.
decrypt1d
New Malware Can Steal Crypto on Apple macOS Devices: Microsoft
The latest version of XCSSET can also record a victim's screen—and even manipulate the Bitcoin addresses that appear in their ...