com.apple

Title/body text match only.

• Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor

  Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor Operation FlutterBridge is a malvertising campaign targeting macOS users. It distributed the new backdoor FlutterShell, built using the Flutter framework. The post Operation FlutterBridge: mac

• macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox

  macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox DPRK-linked implant embeds 38 fabricated system messages that spoof an LLM triage harness, hiding a credential stealer and Telegram C2 underneath. Executive Summary SentinelLABS has analyzed a

• Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

  Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit Introduction Google Threat Intelligence Group (GTIG) has identified a new and powerful exploit kit targeting Apple iPhone models running iOS version 13.0 (released in September 2019) up to version 17.2.1 (released in D

• The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

  The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors Introduction Google Threat Intelligence Group (GTIG) has identified a new iOS full-chain exploit that leveraged multiple zero-day vulnerabilities to fully compromise devices. Based on toolmarks i

• North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

  North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack Written by: Austin Larsen, Dima Lenz, Adrian Hernandez, Tyler McLellan, Christopher Gardner, Ashley Zaya, Michael Rudden, Mon Liclican, Muhammad Umair Introduction Google Threat Intel

• UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering

  UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering Written by: Ross Inman, Adrian Hernandez Introduction North Korean threat actors continue to evolve their tradecraft to target the cryptocurrency and decentralized finance (DeFi) verticals.

All reports →