Malware bypassed macOS Gatekeeper by abusing Apple's notarization proccess

A new variant of the MacSync Stealer uses a code-signed Swift application to get around Apple's macOS Gatekeeper protections.
iDrop News

Don’t Trust the Double-Click: This Mac Malware Was ‘Approved’ by Apple

A new version of the MacSync Stealer malware has been found masquerading as a legitimate, notarized app. It bypasses standard macOS security warnings to harvest credentials and crypto wallets.
SecurityWeek

MacSync macOS Malware Distributed via Signed Swift Application

New MacSync Stealer version is executed via a signed and notarized Swift application, eliminating the need for direct ...
CSO Online

MacSync Stealer malware bypasses macOS Gatekeeper security warnings

MacSync Stealer, by contrast, is downloaded from an ordinary-looking utility URL as a code-signed and notarized Swift ...

MacSync Stealer variant finds a way to bypass Apple malware protections

We’ve recently seen how ChatGPT was used to trick Mac users into installing MacStealer, and now a different tactic ...
eWeek

Google Apps Script Vulnerability Exposes Malware Risks

Security firm Proofpoint on Jan. 4 warned of a new attack vector that could enable hackers to abuse Google Apps Script to exploit cloud users. Google Apps Script is a JavaScript-based language used ...
Direct Marketing News

Script kiddies targeted by fake malware builder

Tension: Inexperienced hackers crave shortcuts to power, yet the very tools that promise a shortcut often flip and claim the hackers as victims. Noise: Forums and YouTube tutorials glamorize “plug-and ...
ZDNet

People are already trying to get ChatGPT to write malware

The ChatGPT AI chatbot has created plenty of excitement in the short time it has been available and now it seems it has been enlisted by some in attempts to help generate malicious code. AI chatbots ...

Fake Windows update pushes malware in new ClickFix attack

The ClickFix campaign disguises malware as legitimate Windows updates, using steganography to hide shellcode in PNG files and ...
Ars Technica

ChatGPT is enabling script kiddies to write functional malware

Since its beta launch in November, AI chatbot ChatGPT has been used for a wide range of tasks, including writing poetry, technical papers, novels, and essays and planning parties and learning about ...