Some of Our Sources
- Techcrunch
- TutsPlus - Code
- Web Designer Wall
- Abduzeedo
- Fuel Your Creativity
- CSS Globe
- Specky Boy
- CSS Tricks
- Design Modo
- Android Dissected
Help Webnuz
Referal links:
January 16, 2021 03:30 am
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/TaDC0WIerOY/macos-malware-used-run-only-applescripts-to-avoid-detection-for-five-years
MacOS Malware Used Run-Only AppleScripts To Avoid Detection For Five Years
An anonymous reader quotes a report from ZDNet: For more than five years, macOS users have been the targets of a sneaky malware operation that used a clever trick to avoid detection and hijacked the hardware resources of infected users to mine cryptocurrency behind their backs. Named OSAMiner, the malware has been distributed in the wild since at least 2015 disguised in pirated (cracked) games and software such as League of Legends and Microsoft Office for Mac, security firm SentinelOne said in a report published this week. But the cryptominer did not go entirely unnoticed. SentinelOne said that two Chinese security firms spotted and analyzed older versions of the OSAMiner in August and September 2018, respectively. But their reports only scratched the surface of what OSAMiner was capable of, SentinelOne macOS malware researcher Phil Stokes said yesterday. The primary reason was that security researchers weren't able to retrieve the malware's entire code at the time, which used nested run-only AppleScript files to retrieve its malicious code across different stages. As users installed the pirated software, the boobytrapped installers would download and run a run-only AppleScript, which would download and run a second run-only AppleScript, and then another final third run-only AppleScript. Since "run-only" AppleScript come in a compiled state where the source code isn't human-readable, this made analysis harder for security researchers.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/TaDC0WIerOY/macos-malware-used-run-only-applescripts-to-avoid-detection-for-five-years
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot