[Trend]Mac Malware that Spoofs Trading App Steals User Information, Uploads it to Website

[igor51]

Mac Malware that Spoofs Trading App Steals User Information, Uploads it to Website

We recently found and analyzed a malicious malware variant that disguised itself as a legitimate Mac-based trading app called Stockfolio. We found two variants of the malware family. The first one contains a pair of shell scripts and connects to a remote site to decrypt its encrypted codes while the second sample, despite using a simpler routine involving a single shell script, is actually incorporates a persistence mechanism.

The post Mac Malware that Spoofs Trading App Steals User Information, Uploads it to Website appeared first on .

Source: Mac Malware that Spoofs Trading App Steals User Information, Uploads it to Website