Apple updates XProtect, blacklists iWorm variants

October 6, 2014

In the face of an attack that infected more than 18,500 Macs, Apple has updated its XProtect anti-malware system to recognize and blacklist two variants of the iWorm malware used in the attack.

Researchers at Doctor Web last week revealed that they had discovered a new botnet that appeared to be infected with Mac.BackDoor.iWorm.

Using Reddit's search function, the infected machines look for specific comments on the site that contain a list of botnet command-and-control servers and ports. The bots then pick a random server to query and through a “special routine,” try and connect the compromised machine to the server.

The update prevents the specified variants from being installed on user systems, according to MacRumors.com.

Teri Robinson

Data Security

Crypto stealing malware spread via bogus recruitment messages

SC StaffDecember 31, 2024

Malicious job offers purporting to be from widely known companies have been leveraged by threat actors to facilitate the distribution of cryptocurrency-stealing malware, reports Cybernews.

Ransomware

Novel malware leveraged in Cloud Atlas attacks

SC StaffDecember 30, 2024

Attacks with the new VBCloud malware have been deployed by Russian state-backed threat operation Cloud Atlas, also known as Clean Ursa, Oxygen, Inception, and Red October, to facilitate data theft against dozens of users, most of whom are in Russia, reports The Hacker News.

North Korea hacking concept of a computer keyboard and a key painted with the North Korean flag

Threat Intelligence

Novel OtterCookie malware added to Contagious Interview attack arsenal

SC StaffDecember 27, 2024

BleepingComputer reports that intrusions with the new OtterCookie malware and its updated iteration have been launched by North Korean threat actors against software developers as part of the Contagious Interview campaign, which initially involved the deployment of the BeaverTail and InvisibleFerret payloads.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Related Terms

Adware