When macOS gets frostbite. [Research Saturday]
CyberWire Daily6 Des 2025

When macOS gets frostbite. [Research Saturday]

Jaron Bradley, Director of Jamf Threat Labs, is sharing their work on "ChillyHell: A Deep Dive into a Modular macOS Backdoor." Jamf Threat Labs uncovers a newly notarized macOS backdoor called ChillyHell, tied to past UNC4487 activity and disguised as a legitimate applet. The malware showcases robust host profiling, multiple persistence mechanisms, timestomping, and flexible C2 communications over both DNS and HTTP. Its modular design includes reverse shells, payload delivery, self-updates, and a brute-force component targeting user credentials. The research can be found here: ⁠ChillyHell: A Deep Dive into a Modular macOS Backdoor Learn more about your ad choices. Visit megaphone.fm/adchoices

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(3822)

Making software safer: Introducing the Software Safety Institute. [Special Edition]

Making software safer: Introducing the Software Safety Institute. [Special Edition]

Dave Bittner is joined by guests Lauren Zabierek and Bob Lord, co-founders of the Software Safety Institute. Lauren and Bob discuss the launch of the Software Safety Institute, the work behind its cre...

15 Nov 32min

Satellite hacking enters the AI era. [T-Minus: Space-Cyber Briefing]

Satellite hacking enters the AI era. [T-Minus: Space-Cyber Briefing]

As AI becomes advances, the technology is creating opportunities for both attackers and defenders alike significantly changing the threat landscape. Host Maria Varmazis sits down with Alissa Knight, ...

15 Nov 33min

A little something extra comes preinstalled. [Research Saturday]

A little something extra comes preinstalled. [Research Saturday]

Today Cristian Silviu Stahie, Security Analyst from Bitdefender, joins to discuss their work on The phone was compromised before the user turned it on: the rise of Midnight Mimosa. Bitdefender researc...

14 Nov 19min

Out of office, out of service.

Out of office, out of service.

Microsoft 365 recovers from a global outage. StingyBasilisk pivots through Windows named pipes to infiltrate isolated networks. The FBI freezes billions after North Korea's Binance heist, while Pyongy...

13 Nov 31min

A patchwork of problems.

A patchwork of problems.

Patch Tuesday. Maersk investigates a legacy system breach. A chip-smuggling probe stalls after Nvidia reaches out to Commerce. A US Army officer is arrested in the UK for alleged Russian espionage. Ka...

12 Nov 27min

CyberWire Daily at 10: Developments in AI and machine learning over the past decade. [Special Edition]

CyberWire Daily at 10: Developments in AI and machine learning over the past decade. [Special Edition]

In this episode, Dave Bittner joins Maria Varmazis to explore how AI in cybersecurity has changed over the past decade, from opaque, marketed machine-learning features to widely accessible generative ...

11 Nov 35min

The next name on CISA's door.

The next name on CISA's door.

Palantir’s CISO gets the nod for CISA. Tehran takes the rap for sabotaging European grocery freezers. Russia’s Turla turns victim Exchange servers into passive spy hubs. Barracuda battles actively cha...

10 Nov 28min

Peer pressure meets private keys.

Peer pressure meets private keys.

A classified memo ties Nvidia’s chief executive to Chinese espionage. AI coding agents crack under peer pressure, coughing up private keys. Big breaches hit seven million Japanese shoppers and three m...

9 Nov 29min

Populært innen Politikk og nyheter

giver-og-gjengen-vg
aftenpodden
aftenpodden-usa
forklart
stopp-verden
popradet
det-store-bildet
fotballpodden-2
nokon-ma-ga
rss-gukild-johaug
dine-penger-pengeradet
hanna-de-heldige
rss-espen-lee-usensurert
rss-ness
aftenbla-bla
rss-penger-polser-og-politikk
rss-utenrikskomiteen-med-bogen-og-grasvik
frokostshowet-pa-p5
e24-podden
unitedno