XCSSET Malware Update | macOS Threat Actors Prepare for Life Without Python

Threat actors behind the XCSSET malware have been relatively quiet since last year. However, new activity beginning around April 2022 and increasing through May to August shows that actors have not only adapted to changes in macOS Monterey, but are preparing for the demise of Python, an integral and essential part of their current toolkit.

REFERENCE: https://www.sentinelone.com/blog/xcsset-malware-update-macos-threat-actors-prepare-for-life-without-python/

TAGS: XCSSET, malware, macOS, SHC-compiled, AppleScript

MALWARE FAMILY: XCSSET

ATT&CK IDS: T1059 - Command and Scripting Interpreter, T1176 - Browser Extensions, T1566 - Phishing, T1027 - Obfuscated Files or Information

Read More:

https://otx.alienvault.com/pulse/6304e95e39919cf7ead010b7