Elektrine
Log in Register

#macosmalware

2 posts · Last used Sep 26

CyberWorldOps @cyberworldops@infosec.exchange
· 1mo ago
Jamf Threat Labs found a PamStealer macOS variant that withholds its main payload until live X25519 key exchange and server-assisted decryption. This blocks offline analysis and relies on AppleScript, JXA and zsh loaders with multi-layer persistence. Hunt for JXA execution and anomalous C2 sessions. #PamStealer #MacOSMalware #ThreatIntel
PamStealer macOS Malware Uses Live C2 Decryption
cyberworldops.eu

PamStealer macOS Malware Uses Live C2 Decryption

New PamStealer macOS variant uses fake Wavel wallet, JXA-to-zsh chain and server-side X25519 decryption to deliver Swift password stealer.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 3mo ago
Discover how the new ClickLock macOS malware paralyzes systems and steals passwords. Learn vital defensive measures to protect your Apple computer today. #ClickLock #macOSMalware #CyberSecurity #InfoSec
ClickLock macOS Malware: A Hidden Threat Hijacking Desktops
meterpreter.org

ClickLock macOS Malware: A Hidden Threat Hijacking Desktops

Discover how the new ClickLock macOS malware paralyzes systems and steals passwords. Learn vital defensive measures to protect your Apple computer today.

0
0
0
0
You've seen all posts