Malware News • 3h
XCSSET v40: Evolution of the Xcode-Targeted Supply Chain Malware
XCSSET v40 is a specialized macOS malware family targeting the software development supply chain by compromising Xcode projects (.xcodeproj). The latest iteration employs advanced obfuscation and novel persistence mechanisms to bypass signature-based detection and embed malicious logic within developer IDEs. By poisoning the build process, XCSSET facilitates downstream supply chain attacks, enabling the delivery of compromised binaries to end-users. Security researchers from Unit 42 and Microsoft Security have identified a significant increase in the complexity of the malware's binary triage evasion, necessitating AI-assisted decoding to uncover its operational mechanics and persistence triggers.
Links:Malware News, Unit 42 Threat Intelligence, Daily, Blog, Adex, Mallory, Documents, Microsoft •