LuckyMouse uses a backdoored Electron app to target MacOS

LuckyMouse, a Chinese-based cyber-espionage group, is targeting MacOS users in 2022 with a surveillance tool.

REFERENCES: https://blog.sekoia.io/luckymouse-uses-a-backdoored-electron-app-to-target-macos/

https://www.trendmicro.com/en_us/research/22/h/irontiger-compromises-chat-app-Mimi-targets-windows-mac-linux-users.html

TAGS: luckymouse, hyperbro, rshell, macos, electron app

INDUSTRY: Technology

MALWARE FAMILIES: HyperBro, LuckyMouse, RShell, PlugX

ATT&CK IDS: T1553 - Subvert Trust Controls, T1071 - Application Layer Protocol, T1033 - System Owner/User Discovery, T1095 - Non-Application Layer Protocol, T1036 - Masquerading, T1119 - Automated Collection, T1041 - Exfiltration Over C2 Channel

Read More:

https://otx.alienvault.com/pulse/62fb6186791ebbf4f4472531