#GhostLoader

Malware/Tool

2020-10-02 • Ghost Mach-O: an analysis of Lazarus’ Mac-malware innovations

A Lazarus macOS loader that decrypts and executes a remote Mach-O payload directly from memory, with a disk-execution fallback.

Tagged Reports

« Back