MEXC warns malware detected on new macOS

MEXC warns malware detected on new macOS heading to steal Krypto coins from bag

MacOS, although it has been named one of the most secure operating systems in the world, has been growing new malware to tackle users of this operating system, and this time it is once again paranoid for macOS users.

According to a report by the website, MEXC has mentioned the detection of a malware distribution campaign of the victim's data theft type, or a new Infostealer focused on attacks on a group of users of the macOS operating system called MacSync Stealer (v1.1.2), a research team from SlowMist, an expert in the development of the Blockchain Ecosystem, has said that the malware is intended to steal the Crypto Wallet data, focusing primarily on the private keys or private keys of these pockets, which allows hackers to steal money. Instantly inside the wallet. The target of the malware covers many popular Krypto wallets such as MetaMask, Trust Wallet and Exodus, etc. The malware can also steal the data of hardware wallets or Hard Wallets and web browser extension wallets.

There is also the ability to steal data such as passwords logged on web browsers, logged codes, system Keychain, and keys for infrastructure such as SSH, AWS, and K8s. The data in the latter allows hackers to access the cloud that the victim uses. There is also a great ability for stealth, making it very difficult to detect by anti-Virus programs.

As part of the campaign, the research team explained that hackers start by deceiving victims into phishing links, claiming that they have distributed cracks to help them use free, updated, and other bootleg software according to the needs of the hacker's target. After the victim downloads them down, the malware will contact the C2 or Command and Control server and immediately steal the information mentioned above. Exfiltration to the C2 server.

This malware also has the ability to break through macOS's Bypass. It can also use the System Administrator Permission to access important data on Keychain and web browsers. And for version 1.1.2, the latest version of this malware, it has the ability to cause a high degree of Obfuscation, such as Encryption, Malware Files (Payload) to evade Signature-based Protection, the use of tools already available on macOS like osascript to trick the victim into entering the system password, which is protected. The research team determined that users should turn off the automated scripting system and find a tool for endpoint cyber protection or EDR. To prevent this malware and only use applications from the official app store, it will reduce the risk.

# macos # Trending # Lemon 8 Howtoo # lemon 8 diary # mexc