Jamf Threat Labs researchers warned against pirate applications distributing a backdoor to macOS users.
The researchers noticed the apps appeared similar to ZuRu malware and allowed attackers to download and execute multiple payloads to compromise machines.
The news comes a couple of days after the discovery of the SpectraBlur backdoor, a macOS malware that came with the capabilities to execute shell code and communicate with the C2 server using RC4-encrypted sockets.
[Read More…](Unmasking MacOS Malware in Pirated Apps | Cyware Alerts - Hacker News)