If you're on an Apple macOS device right now, you might want to keep reading.
Researchers from Microsoft Threat Intelligence have uncovered a new variant of malware that can target crypto wallets.
XCSSET was first detected back in 2020—and allows malicious actors to take screenshots, record what users are doing, and steal data from Telegram.
This updated version can also target data in Apple's Notes app, and uses obfuscation techniques that make the malware harder to detect.
Microsoft Threat Intelligence has uncovered a new variant of XCSSET, a sophisticated modular macOS malware that targets users by infecting Xcode projects, in the wild. While we’re only seeing this new XCSSET variant in limited attacks at this time, we’re sharing this information… pic.twitter.com/oWfsIKxBzB
— Microsoft Threat Intelligence (@MsftSecIntel) February 17, 2025
Enhanced persistence mechanisms mean the malicious payload is deployed every time the Launchpad is activated from the macOS dock.
And given it has the capability of encrypting files, there's a real risk of XCSSET being used for ransomware attacks.
Microsoft says the latest variant has only been detected in "limited attacks" so far, and was sharing th...
24h Most Popular
Utilities