Trojan Komplex A Fresh Malware For Mac
- Trojan Komplex A Fresh Malware For Mac Free
- Trojan Komplex A Fresh Malware For Mac
- Trojan Komplex A Fresh Malware For Mac Download
Apple has always prided itself on how malware-free its macOS is relative to other platforms such as Window and Linux. But as with any operating system that gains popularity and mass usage, Mac OS X has now become the center of attention for many hackers, as a fresh wave of malware attacks is hitting users on the platform. The latest of these is the well-known Xagent malware, notorious for infecting all major platforms including Windows, Linux, Android and iOS.
To lower suspicions among victims, the Komplex malware loads a 17-page PDF (roskosmos_2015-2025.pdf) on the Mac OS X machine targeted. To lower suspicions among victims, the Komplex malware loads a 17-page PDF (roskosmos_2015-2025.pdf) on the Mac OS X machine targeted.
Trojan Komplex A Fresh Malware For Mac Free
The malware is similar to its strains on the other platforms. It acts a a modular backdoor for intruders. What this means is, it opens up opportunities for hackers to access a system and make it do whatever they want.
The malware is spreading through third-party downloaders such as Komplex. Once installed, the malware checks for a debugger to avoid detection.
Trojan Komplex A Fresh Malware For Mac
If none is present, it checks for commands from a Command & Control ( C&C) server for instructions through the internet. The server tells the malware to activate certain payloads, which can do a range of malicious activities, such as taking screenshots and sending them to a server, stealing passwords, and even stealing iPhone backups if any are present. The malware can execute whatever code it likes, and can even offload running processes.
Trojan Komplex A Fresh Malware For Mac Download
The malware was detected by security research and antivirus firm Bitdefender, who noted that the virus uses domains that impersonate official Apple domains, making unsuspecting users more susceptible to getting infected. The purpose of such a malware is clearly espionage, but it is unclear where it originated from. Bitdefender, however, believes that the APT28 group is behind it. The group is allegedly allied with the Russian government, and was behind the during the 2016 US presidential election campaign. 'Our past analysis of samples known to be linked to APT28 group shows a number of similarities between the Sofacy/APT28/Sednit Xagent component for Windows/Linux and the Mac OS binary that currently forms the object of our investigation,' the report reads.