lazarusholic

Everyday is lazarus.dayβ

#macOS

Tool/Malware

Reports

2026-05-28
Levelblue
Sapphire Sleet Targets macOS in Multi-Stage Intrusion Campaign
#SapphireSleet #macOS
2026-05-27
Wiz
Threat Actor Targets Crypto Organizations
#JINX-0164 #Suspicious #macOS
2026-04-21
AnyRun
New Lazarus APT Campaign: “Mach-O Man” macOS Malware Kit Hits Businesses
#ClickFix #Lazarus #macOS
2026-04-16
Microsoft
Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise
#SapphireSleet #macOS
2026-01-01
Objective-see
The Mac Malware of 2025
#Koi #RNStealer #RustDoor #macOS
2025-12-04
Moonlock
North Korean hackers are pushing fake Microsoft Teams Update to macOS users
#macOS
2025-10-28
Kaspersky
BlueNoroff's latest campaigns: GhostCall and GhostHire
#BlueNoroff #macOS #GhostCall #GhostHire #SysPhon
2025-10-22
Moonlock
Multi-staged, crossplatform, and likely targeted DPRK campaign
#macOS
2025-10-13
Logpresso
Malware Analysis Targeting Windows and macOS by the Lazarus Group
#Lazarus #macOS
2025-08-08
Moonlock
The North Korean spy scheme and the rise of stealers
#macOS
2025-07-02
SentinelOne
macOS NimDoor | DPRK Threat Actors Target Web3 and Crypto Platforms with Nim-Based Malware
#NimDoor #macOS
2025-06-20
Validin
Zooming through BlueNoroff Indicators with Validin
#BlueNoroff #macOS
2025-06-18
Huntress
Inside the BlueNoroff Web3 macOS Intrusion Analysis
#BlueNoroff #macOS
2025-04-23
Huntabil
North Korea Calling - Web3 Zoom Campaign
#macOS
2025-03-24
BirminghamCyber
Cómo domar un Chollima
#ChaoticCapybara #VelvetChollima #macOS #ContagiousInterview
2025-02-26
PaloaltoNetworks
RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector
#ContagiousInterview #Koi #RustDoor #macOS #AlluringPisces
2025-02-04
CybersecSentinel
FERRET Malware Targets macOS in Sophisticated North Korean Attacks
#BeaverTail #FriendlyFerret #FlexibleFerret #InvisibleFerret #Lazarus #OtterCookie #macOS
2025-02-03
SentinelOne
macOS FlexibleFerret | Further Variants of DPRK Malware Family Unearthed
#ContagiousInterview #FlexibleFerret #macOS #FrostyFerret
2025-01-28
Hunt.io
Unmasking SparkRAT: Detection & macOS Campaign Insights
#SparkRAT #macOS
2025-01-20
SentinelOne
2024 macOS Malware Review | Infostealers, Backdoors, and APT Campaigns Targeting the Enterprise
#BeaverTail #HiddenRisk #RustyAttr #Trend #macOS
2025-01-01
Objective-see
The Mac Malware of 2024 👾
#BeaverTail #HiddenRisk #SpectralBlur #macOS
2024-11-13
Rewterz
North Korean Threat Actors Deploy Flutter-Based Malware to Target macOS Users – Active IOCs
#Flutter #macOS
2024-11-13
Group-IB
Stealthy Attributes of APT Lazarus: Evading Detection with Extended Attributes
#Lazarus #RustyAttr #macOS #YARA
2024-11-12
Jamf
APT Actors Embed Malware within macOS Flutter Applications
#Flutter #macOS
2024-11-07
SentinelOne
BlueNoroff Hidden Risk | Threat Actor Targets Macs with Fake Crypto News and Novel Persistence
#BlueNoroff #HiddenRisk #macOS
2024-10-30
Trellix
MacOS Malware Surges as Corporate Usage Grows
#Lazarus #macOS
2024-10-03
Elastic
Sugarcoating KANDYKORN: a sweet dive into a sophisticated MacOS backdoor
#KANDYKORN #macOS #Youtube #REF7001
2024-10-03
Kandji
Another PDF Viewer - Is It Malicious?
#macOS #RustBucket
2024-08-16
Kandji
TodoSwift Disguises Malware Download Behind Bitcoin PDF
#BlueNoroff #macOS #KANDYKORN
2024-05-08
Proofpoint
macOS Components Used in North Korean Crypto-Heists
#Youtube #macOS #Slides
2024-04-24
Phylum
Nation-State Threat Actors Renew Publications to npm
#NPM #macOS
2024-04-11
InterpresSecurity
Return of the mac(OS): Transparency, Consent, and Control (TCC) Database Manipulation
#APT37 #CloudMensis #macOS #JokerSpy
2024-01-04
Objective-see
Analyzing DPRK's SpectralBlur
#SpectralBlur #BlueNoroff #macOS
2024-01-01
Objective-see
The Mac Malware of 2023
#RustBucket #SmoothOperator #ObjCShellz #macOS #KANDYKORN #JumpCloud #JokerSpy
2023-12-05
Kaspersky
New BlueNoroff loader for macOS
#RustBucket #BlueNoroff #macOS
2023-11-27
SentinelOne
DPRK Crypto Theft | macOS RustBucket Droppers Pivot to Deliver KandyKorn Payloads
#RustBucket #BlueNoroff #macOS #KANDYKORN
2023-11-13
Sakai
북한 라자루스(Lazarus) 산하 BlueNorOff(블루노로프) 만든 맥OS 악성코드-ProcessRequest(2023.11.7)
#BlueNoroff #macOS
2023-11-07
Jamf
BlueNoroff strikes again with new macOS malware
#RustBucket #BlueNoroff #macOS #ObjCShellz
2023-11-01
Elastic
Elastic catches DPRK passing out KANDYKORN
#KANDYKORN #REF7001 #macOS
2023-10-16
SentinelOne
macOS Malware 2023 | A Deep Dive into Emerging Trends and Evolving Techniques
#RustBucket #Trend #macOS #JokerSpy
2023-10-13
CrowdStrike
Navigating the LABYRINTH: An In-Depth Examination of Interactive Intrusions by a North Korean APT
#LabyrinthChollima #macOS #AppleJeus
2023-10-13
Jamf
A Journey into Reversing RustBucket on macOS
#RustBucket #BlueNoroff #macOS
2023-09-27
Jamf
Analyzing state-sponsored malware on macOS
#JokerSpy #macOS #3CXDesktopApp #JumpCloud #RustBucket
2023-07-05
SentinelOne
BlueNoroff | How DPRK’s macOS RustBucket Seeks to Evade Analysis and Detection
#RustBucket #BlueNoroff #macOS
2023-06-29
Elastic
The DPRK strikes using a new variant of RUSTBUCKET
#RustBucket #BlueNoroff #macOS #REF9135
2023-06-20
Genians
한국내 macOS 이용자를 노린 APT37 공격 등장
#macOS #APT37
2023-05-22
SEKOIA
Bluenoroff’s RustBucket campaign
#RustBucket #BlueNoroff #macOS
2023-05-12
JPCERT
Attack Trends Related to DangerousPassword
#DangerousPassword #CHM #OneNote #macOS
2023-05-12
PolySwarm
BlueNoroff's RustBucket MacOS Malware
#RustBucket #BlueNoroff #macOS
2023-05-01
JPCERT
攻撃キャンペーンDangerousPasswordに関連する攻撃動向
#OneNote #CHM #macOS #DangerousPassword
2023-04-27
Sakai
북한 라자루스(Lazarus) 산하 BlueNorOff(블루노로프) 만든 맥OS 악성코드-Internal PDF Viewer(2023.4.23)
#BlueNoroff #macOS #RustBucket
2023-04-21
Jamf
BlueNoroff APT group targets macOS with ‘RustBucket’ Malware
#RustBucket #BlueNoroff #macOS
2023-04-01
Objective-see
Ironing out (the macOS) details of a Smooth Operator (Part II)
#SupplyChain #3CXDesktopApp #SmoothOperator #macOS
2023-03-29
Objective-see
Ironing out (the macOS details) of a Smooth Operator
#SupplyChain #3CXDesktopApp #SmoothOperator #macOS
2022-09-26
SentinelOne
Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto
#Cryptocurrency #Inception #macOS
2022-08-17
Bleepingcomputer
North Korean hackers use signed macOS malware to target IT job seekers
#Inception #macOS #News
2022-07-19
ESET
I see what you did there: A look at the CloudMensis macOS spyware
#CloudMensis #macOS
2021-01-07
K7SecurityLabs
Ghost Mach-O: an analysis of Lazarus’ Mac-malware innovations
#macOS #Youtube #Lazarus
2020-10-02
K7SecurityLabs
Ghost Mach-O: an analysis of Lazarus’ Mac-malware innovations
#macOS #Lazarus
2020-07-27
SentinelOne
Four Distinct Families of Lazarus Malware Target Apple’s macOS Platform
#macOS
2020-05-05
Objective-see
The Dacls RAT ...now on macOS!
#Dacls #macOS
2020-02-22
Objective-see
Weaponizing a Lazarus Group Implant
#macOS #AppleJeus #Lazarus
2020-01-01
Objective-see
The Mac Malware of 2019
#macOS
2019-12-06
K7SecurityLabs
Lazarus Group Evolves Fileless Mac Threat
#Fileless #macOS
2019-11-20
TrendMicro
Mac Backdoor Linked to Lazarus Targets Korean Users
#NukeSped #macOS #Lazarus
2019-09-25
SentinelOne
Detecting macOS.GMERA Malware Through Behavioral Inspection
#GMERA #macOS
2019-09-20
TrendMicro
Mac Malware that Spoofs Trading App Steals User Information, Uploads it to Website
#GMERA #macOS