Home Creators Posts Import Register Favorites Logout
haven't archived this post yet. have a subscription? use the importer!

Content

A new XCSSET malware variant targets macOS users, risking cryptocurrency wallets and sensitive data, spreading through infected Xcode projects. It is much more for coders but be vigilant nonetheless.

WHAT YOU CAN DO?

  • Enable System Defenses: Turn on macOS security features like Gatekeeper (to block unsigned apps) and FileVault (to encrypt your disk).

  • Consider using a firewall to monitor and block suspicious outgoing connections, as XCSSET communicates with command-and-control servers to exfiltrate data.

  • For everyday users who don’t use Xcode, the risk is lower but still present if you install apps built from infected projects. Sticking to the Mac App Store and avoiding unverified downloads is your best defense.

 

Files

Previews only

Comments

Talesfromthecrypt

Any software pros out there, how is Linux for viruses nowadays? It used to be safe, but then again Mac's used to be 'virus proof.'

JP

Macs were never “virus proof”, hackers just get a better bang for their buck if they develop their malware for Windows OS since there are far more windows users than macOS users.

JP

Thanks for the heads up. While FileVault Disk Encryption is a great security feature it is only useful for preventing physical attacks like theft of your machine. Encrypting your disk doesn’t do anything for protecting against malware that you’ve installed. You should still always encrypt your disk so that if your laptop gets stolen or lost an attacker cannot extract data or clone your drive.