May 3, 2017 - Snake, a malware framework used in espionage attacks, has been discovered targeting MacOS devices by security researchers. New Rogue Malware Found On Tor: Espionage Suspected. A rogue Tor node was recently found spewing a new malware that was dubbed as OnionDuke. The same type of malicious program was reported earlier for attacking targets within European Government agencies. Called Fruitfly by Apple, the malware may have been in use for at least two years, specifically in targeted attacks against biomedical research facilities. The malware doesn’t have a long list of functions, but the one thing it seems to focus on is taking screenshots and activating the webcam to capture videos. Mac malware uses 'truly antique' methods to conduct espionage on scientific facilities Malwarebytes believes the malware was only used in extremely targeted attacks.
- Malware Used For Espionage Attacks Found For Machines
- Malware Used For Espionage Attacks Found For Mac Free
Malware Used For Espionage Attacks Found For Machines


Download the full research paper: Adding Android and Mac OS X Malware to the APT Toolbox APTs refer to cyber-espionage campaigns—a series of failed and successful attempts to compromise specific targets’ networks over time. APTs aim to establish persistent, covert presence in a target’s network in order to extract information as necessary. While socially engineered emails designed to lure a target to execute malicious attachments are often used as an initial attack vector, those behind APT campaigns make use of a variety of “second-stage” malware downloads, usually Remote Access Trojans (RATs), and seek to acquire credentials that enable them to maintain presence (e.g., legitimate VPN access) without using malware. APT attacks continue to adapt to the changing network landscapes of their targets. Earlier this year, Trend Micro documented the operation of a campaign known as “Luckycat,” which used a variety of malicious software to compromise their targets’ networks. They also used a variety of second-stage malware, which gave them an additional foothold in compromised networks. During a recent investigation of a Luckycat C&C server, we found malware for the Android, Mac OS X, and Windows platforms.
Malware Used For Espionage Attacks Found For Mac Free
The malware for the Mac OS X platform known as “SabPub” was previously discovered and linked to the Luckycat campaign. SabPub was delivered both via malicious Word documents that exploit CVE-2009-0563 and a Java vulnerability, CVE-2012-0507.5 On this Luckycat C&C server, we found that SabPub is still being distributed via a Java exploit.