🤖 XCSSET v4.0 targets macOS devs via compromised Xcode projects in Git repos. Unit 42: 4-stage chain, 17 modules — new Chrome hijacker (CDP, steals cookies/MetaMask, fileless reverse shell) and Telegram trojanizer. Loader re-compiled per-build with unique ciphers. 🔗 https://www.bleepingcomputer.com/news/security/new-xcsset-variant-targets-macos-devs-via-compromised-xcode-projects/ #Malware #macOS #SupplyChain #CyberSec