Name: New Mac malware infects and spreads via Xcode projects | AppleInsider
Brand: appleinsider.com
SKU: appleinsider-com-40
Availability: OnlineOnly

critic

New Mac malware infects and spreads via Xcode projects | AppleInsider

preview

&nbsp;&nbsp;&nbsp;AppleInsider is supported by its audience and may earn commission as an Amazon Associate and affiliate partner on qualifying purchases. These affiliate partnerships do not influence our editorial content.A number of projects have been found to contain malware that can attack Safari and other browsers, security researchers have revealed, with the discovery of XCSSET malware making its way into Mac software projects through largely unknown means. Researchers at Trend Micro what the company describes as "an unusual infection related to Xcode developer projects," where malware would incorporate itself into the project itself. The malware was found to have multiple payload possibilities, and though it poses a potential risk to end users using software developed via Apple's IDE, it actually seems to be a bigger issue for the developers themselves. The malware, which is part of the XCSSET family, was found to incorporate files that suggested it would enable a "command and control" of a target system, namely that it would allow the attacker using the malware to take control of the infected Mac. This can allow for a wide variety of actions to be performed on infected systems, including acquiring personal data and performing a ransomware-style attack involving encryption. The team suggests the unusual nature of the malware is from how it is being distributed, namely that it is being "injected into local Xcode projects so that when the project is built, the malicious code is run." It is unclear exactly how the code is being injected into the project at this time. For developers who rely on collaborating with others, Trend Micro suggests the threat is worse when taking into account projects being shared via GitHub and other code repositories, as this could lead to "a supply-chain-like attack for users who rely on these repositories as dependencies in their own projects." After being installed, the malware is able to attack and other browsers on the Mac to acquire useful user data. Zero-day vulnerabilities discovered include an issue with Data Vault that bypasses macOS' System Integrity Protection feature, as well as in Safari for WebKit Development that creates a fake Safari app that runs instead of the legitimate version. So far, the malware has only been found in two Xcode projects in research so far, with the projects thought not to be widely used by other developers, severely limiting the impact. A list of 380 victim IP addresses were collected by malware authors, with the vast bulk of infections made up of Macs in China and India. Trend Micro recommends that project owners "continue to triple-check the integrity of their projects in order to definitely nip unwarranted problems such as a malware infection in the future."So, first SoftBank decides to sell ARM, a ton of engineers and executives leave TSMC for Chinese firms, because there’s no way THAT could go wrong, and now there’s this malware in the Xcode developed kit used to make all Mac apps&nbsp;And let’s not forget the contrived antitrust cases being spun up now&nbsp;Beginning to look like an all out war on Apple because Apple chose to finally dump intel&nbsp;Of course, I’m just a conspiracy theorist.....said:So, first SoftBank decides to sell ARM, a ton of engineers and executives leave TSMC for Chinese firms, because there’s no way THAT could go wrong, and now there’s this malware in the Xcode developed kit used to make all Mac apps&nbsp;And let’s not forget the contrived antitrust cases being spun up now&nbsp;Beginning to look like an all out war on Apple because Apple chose to finally dump intel&nbsp;Of course, I’m just a conspiracy theorist.....What? You don't even make senseTSMC decided to stop selling to Chinese firms, and so people left (or were poached)XCode Malware has more to do with downloading unverified XCode projects. Probably via tutorial website. Considering most infections are in India &amp; China.Anti-trust cases are absolutely deserved. I should be able to decide what apps I install on MY phone, not Apple.Dump Intel, yeah I doubt that. Maybe some fanboys and creative people will buy ARM. Rest of us, ain't touching it with a stick.It's just that Apple has become the big boy now and so it's getting attention. The iPhone just got owned recently. Including it's so called "secure enclave"&nbsp; Anti-trust cases are absolutely deserved. I should be able to decide what apps I install on MY phone, not Apple.You can put whatever apps you want on an android phone. It’s that simple.&nbsp;Did someone seriously delete my reply to Lam92103?&nbsp;There certainly is a picture forming of yet another multifaceted and coordinated attack on Apple.&nbsp;Apple is poised to turn the entire industry on its head and absolutely dominate in all areas of computing.&nbsp;They’ve been THE software leader. And they’ve been the hardware leader on the phone and tablet side.&nbsp;They’ve been the App Store and business leader.&nbsp;And now they will tie it all together and press the lightspeed button with Mac hardware.&nbsp;Intel being dumped by Apple would tank them by itself, but the new popularity of the Mac fefinitely hurt them. Especially with Mac customers opting often for higher end CPUs.&nbsp;Now we see intel doing some face saving announcements like... GPUs. LOLNO one on earth cares about Intel CPUs.&nbsp;There is nothing new. Intel is the same. AMD is doing well in x86 land.&nbsp;But... the writing is in the wall. The days of x86 dominance is over. Apple Silicon will own x86 in every category.&nbsp;And we will see others move from x86 if intel and AMD can’t innovate to compete.&nbsp;Gp, Dell, Samsung, Sony, razed, IBM, etc. will be stuck with slower processors and bulky, compromised designs while Apple moves on to far superior performance and greater degrees of design freedom.&nbsp;No one in the industry wants Apple to do what they are doing. They are ALL scared. Even Microsoft is reduced to complaining and trying to sue in court. Epic is reduced to complaining that they aren’t allowed to steal.&nbsp;Intel is reduced to pushing integrated GPU tech. And literally no one has a clue what to do.&nbsp;Apple has been DESIGNING their own CPUs for a while now. They purchased the best CPU design team known to man in P. A. SEMI from the end of the PowerPC days And have only grown in expertise since. Apple designs easily outperform the best ARM processors (as well as custom designs from Samsung etc) As well as popular x86 processors and that is in Highly constrained mobile devices. Notebooks and desktops open things up considerably.&nbsp;Apple controlling every component of their products is the stuff of dreams. No one else can do it.&nbsp;That’s why everyone is scared and basically rioting to ty to tear down Apples success.&nbsp;Come a looooong way from Michael Dell suggesting Apple be liquidated and the proceeds go to shareholders.&nbsp;The industry and many need outlets like msnbc and yahoo have been Anti-Apple for a long time.&nbsp;But it doesn’t natter. Apple doesn’t look at them. They simply keep striving to build the best products on the plant and being fueled by the salty tears of their detractors.&nbsp;Please enable JavaScript to comment&nbsp;An app called Diffusion Bee lets users run the Stable Diffusion machine learning model locally on their Apple Silicon Mac to create AI-generated art. Here's how to get started.Apple has released a complete set of updates spanning iOS, iPadOS, and macOS to ensure users can stay up to date without upgrading to iOS 16 or buying newer supported products.Does the iPhone 14 event really excite you? Do you like teaching people how to use that iPhone or iPad? We may have the perfect opportunity for you.Apple's iPhone 14 Pro and iPhone 14 Pro Max have arrived. Here's how they stack up versus the iPhone 13 Pro and Pro Max.Apple's iPhone 14 is aimed at about the same market that the iPhone SE targets. Here's how it compares to the third-generation iPhone SE.Apple reintroduced the Plus iPhone descriptor at its event on Wednesday with the introduction of the iPhone 14 Plus. Here's how it compares to the iPhone 14 Pro Max.Apple has launched its iPhone 14 range, but on the surface it's a tough compare to the iPhone 13. Here's what's different and if it's good enough for an upgrade.The Apple Watch Series 8 and Apple Watch Ultra are the company's newest wearable accessories, and these are the features that might tempt new buyers or Apple Watch Series 7 owners.&nbsp;Apple has shared a new video that explains how its new Crash Detection feature can detect serious car crashes and alert emergency responders automatically.An app called Diffusion Bee lets users run the Stable Diffusion machine learning model locally on their Apple Silicon Mac to create AI-generated art. Here's how to get started.Safari 16.0 has been released for Apple's ecosystem, with the latest version of the browser for iOS 16 now able to open AVIF images ahead of similar support in macOS Ventura and iPadOS.For 72 hours only, save $150 on Apple's upgraded MacBook Air M2 at Apple Authorized Reseller B&amp;H Photo. Plus, enjoy free expedited shipping in the contiguous U.S.Users who were trying to accept new App Store terms and conditions in the wake of the iOS 16 or iOS 15.7 updates were getting blocked by a recurring error.It's been a rocky road to the iOS 16 launch. Here are the high-profile features that didn't debut in the initial release of Apple's operating system.A future update to iOS 16 will make the iPhone even more environmentally friendly, with Clean Energy Charging prioritizing recharging at times when cleaner energy sources are available.In September 2017, Tim Cook said the iPhone X would "set the path for technology for the next decade." Halfway through that decade, it looks like Cook was right.An app called Diffusion Bee lets users run the Stable Diffusion machine learning model locally on their Apple Silicon Mac to create AI-generated art. Here's how to get started.Apple has released a complete set of updates spanning iOS, iPadOS, and macOS to ensure users can stay up to date without upgrading to iOS 16 or buying newer supported products.Does the iPhone 14 event really excite you? Do you like teaching people how to use that iPhone or iPad? We may have the perfect opportunity for you.It's been a rocky road to the iOS 16 launch. Here are the high-profile features that didn't debut in the initial release of Apple's operating system.Apple's annual update to its operating system brings new features and much-needed changes. Here are the stand-out features in iOS 16.Apple's "Far Out" event is on September 7. Beyond the new iPhone 14, here's what to expect from September's Apple event — and beyond.Apple's iOS 16 will make the iPhone more customizable than ever. This is the ultimate guide on how to make the iPhone a more personal device.The second-generation Razer Kishi is here for iPhone users with a new design, better buttons, and a companion app. How does it stack up to the Backbone One?Less an overhaul and more refining what's already in place, iOS 16 is all about personalization on top of a retained solid foundation.With the SwitchEasy four-in-one MagPower multi-charger, you can power up all your gear with a single device — including your Apple Watch with an Apple-certified puck.The Benks Grand Pro Headphone Stand for AirPods Max is a welcome upgrade over the original. However, it introduces complexity where there was none before — while also ignoring an obvious problem.Keep tabs on the air quality of your home — including potentially deadly radon levels — with the Airthings View Plus.Apple didn't make a Magic Keyboard for iPad mini 6, and Lululook's Magnetic Keyboard perhaps acts as a testament to why.{{ summary }}{{{ reviewStars.html }}}

&nbsp;&nbsp;&nbsp;AppleInsider is supported by its audience and may earn commission as an Amazon Associate and affiliate partner on qualifying purchases. These affiliate partnerships do not influence our editorial content.A number of projects have been found to contain malware that can attack Safari and other browsers, security researchers have revealed, with the discovery of XCSSET malware making its way into Mac software projects through largely unknown means. Researchers at Trend Micro what the company describes as "an unusual infection related to Xcode developer projects," where malware...

New Mac malware infects and spreads via Xcode projects | AppleInsider

No article scores yet.

CRITIC REVIEWS

PUBLIC REVIEWS