Microsoft Threat Intelligence researchers have discovered a new variant of malware called XCSSET that targets crypto wallets on Apple macOS devices. The malware allows malicious actors to take screenshots, record user activity, steal data from Telegram, and now target data in Apple's Notes app. The updated version uses obfuscation techniques to make it harder to detect and has enhanced persistence mechanisms that activate the malicious payload every time the Launchpad is activated. There is a risk of XCSSET being used for ransomware attacks as it can encrypt files. Microsoft has detected the latest variant in limited attacks and is sharing the information to help organizations protect themselves. The malware is primarily disseminated through infected Xcode projects. Microsoft Defender for Endpoint on Mac can detect this latest variant. Users are advised to inspect and verify any downloaded or cloned Xcode projects and install apps only from trusted sources.



Other News from Today