New macOS malware disguises itself as Chrome & Zoom installers

North Korean hackers are using fake job offers and disguised app updates to sneak malware onto Macs, and while Apple’s latest XProtect update blocks some threats, others are still slipping through.

Security researchers from SentinelLabs have identified fresh variants of a North Korean malware family, dubbed “FlexibleFerret,” which is actively exploiting macOS users. The malware is part of a broader campaign known as “Contagious Interview,” where attackers pose as recruiters to trick job seekers into installing malicious software.

Apple responded with an XProtect signature update to counter these threats, blocking several variants, including FROSTYFERRET_UI, FRIENDLYFERRET_SECD, and MULTI_FROSTYFERRET_CMDCODES.

Continue Reading on AppleInsider | Discuss on our Forums

Source: AppleInsider News