Summary: Microsoft has identified a new variant of the macOS malware XCSSET, which includes improved obfuscation, persistence techniques, and infection strategies. This malware specifically targets macOS systems by infecting Xcode projects and has evolved to exploit various applications and system vulnerabilities. The discovery marks the malwareβs first significant update since 2022, raising concerns about its enhanced stealth and resilience against detection.
Affected: Apple macOS users and developers
Keypoints :
- New variant features enhanced obfuscation and persistence mechanisms.
- Targets digital wallets and collects data from various applications, including Notes and Contacts.
- Utilizes a fake Launchpad application to ensure malicious payload runs every time the legitimate Launchpad is accessed.
Source: https://thehackernews.com/2025/02/microsoft-uncovers-new-xcsset-macos.html