It's been a few days since we saw you informed about a bug that can infect the entire system using XcodeThe flaw was first reported by security researchers Oleksandr Shatkivskyi and Vlad Felenuik of Trend Micro and the magazine MacRumors managed to contact both of these researchers and bring an interview, thanks to which we can learn more about the newly found malicious code. At the very beginning, we can remind you that this is malware that is part of the XCSSET “family”. This is an unusual infection that gets into the project in the application XcodeThe infection is then triggered as soon as the code is executed.
You might be interested in
The above-mentioned malware can hack into Safari and other web browsers from which it can steal data. Specifically, it can gain access to data such as cookies, can also create backdoors in JavaScript, it can change the appearance of displayed websites and can even obtain sensitive user data, including banking information and passwords. In addition, the malware can also hack into applications such as Evernote, Notes, Skype, Telegram, QQ and WeChat, it can also create screenshots without the user's knowledge, which are then uploaded to the attacker's server, as well as encrypt files and display various messages. Shatkivskyi and Felenuik from Trend Micro believe that malware from the XCSSET family will become very widespread in the future. The detected malware is also dangerous because it is simply not identified by classic verification methods. This is also why some infected projects appeared on the GitHub portal without any problems. This can easily infect many developers who download a project from GitHub.
Gallery
The security researchers mentioned, among other things, state that the discovered malware could also appear in App Store, precisely because some systems cannot detect it. The team that is responsible for checking new applications on App Store in macOS, will reportedly have his hands full trying to detect the XCSSET malware family, and we should be prepared for the possibility that malware might slip through. Shatkivskyi also said that it is very easy to “fool” the team that works on checking applications for App Store v iOS, and it could be similar in the case of macOS. Shatkivskyi and Felenuik first reported this malware Apple at the end of 2019 and they hope that the apple company will rush to fix it very soon. In addition, the two researchers let it be known that this malware will also work on future Macs with processors Apple Silicon, although they personally did not receive the Mac Developer Transition Kit. However, according to them, macOS remains a very secure operating system, and that Apple they will certainly try to make macOS even more secure in the future.
The only security I have lies in the fact that it is a marginal issue and no one bothers to create malware for it. Otherwise, the system leaks like the old ones. After all, some kid has already hacked into it.
Show which system is not hackable? Has anyone already revealed to you the information that it is easier to deceive security than to invent something that will resist for a long time ???
Which one is unbreakable? Such was his surname here. WP ;)
Just google various hacking competitions where they measure how long it takes to get into Win, Linux and Mac. And the one who screwed up almost always wins. care.
Again, such a side issue, it's not like you would wash in your wet dreams ;)
😀