Categories: malwaresteal

This $49 malware could steal all your Mac data

(Image credit: solarseven / Shutterstock)

Security researchers from Check Point Research have observed a new strain of malware in the wild that has evolved to steal data from MacOS users.

This new strain is named “XLoader” and is derived from the infamous Formbook malware that has been active for over five years. While Formbook was initially created to be a simple keylogger, cybercriminals saw its potential has a universal tool which led its creator to stop sales of the product before relaunching it as XLoader.

While Formbook was used to primarily target Windows users in the past, after its rebranding as XLoader last year, it gained additional capabilities including the ability to target Macs.

What makes XLoader particularly dangerous is the fact that a license for the malware can be purchased on the Dark Web for as little as $49. Cybercriminals who purchase an XLoader license are then equipped to harvest log-in credentials, collect screenshots, log keystrokes and execute malicious files on victim’s machines.

XLoader malware

Check Point Research tracked XLoader activity between December of last year and June of this year to discover that over half (53%) of victims infected with the malware reside in the United States. Hong Kong was the second hardest hit at just nine percent followed by Mexico and Germany at five percent and three percent respectively.

As XLoader is spread using spam emails that contain malicious files, Check Point Research recommends that users avoid opening suspicious email attachments, visiting suspicious websites and using malware removal software to avoid having their Mac or PC infected.

However, if you think your system has become infected, the cybersecurity firm says that ordinary users should consult with a security professional as XLoader is stealth in nature and difficult to detect. 

More experienced users can run Autorun on their Macs, check their username in the OS, go to /Users/[username/Library/LaunchAgents directory and look for suspicious filenames to see if they are infected. Removing any suspicious files should then also remove XLoader from your system though this method isn’t for the inexperienced.

Head of cyber research at Check Point Software, Yaniv Balmas explained why cybercriminals are increasingly targeting Mac users, saying:

“While there might be a gap between Windows and MacOS malware, the gap is slowly closing over time. The truth is that MacOS malware is becoming bigger and more dangerous. Our recent findings are a perfect example and confirm this growing trend. With the increasing popularity of MacOS platforms, it makes sense for cyber criminals to show more interest in this domain, and I personally anticipate seeing more cyber threats following the Formbook malware family. I would think twice before opening up any attachments from emails I get from senders I don’t know.”

After living and working in South Korea for seven years, Anthony now resides in Houston, Texas where he writes about a variety of technology topics for ITProPortal and TechRadar. He has been a tech enthusiast for as long as he can remember

Read More

News Bot

Published by
News Bot
Tags: malwaresteal

Recent Posts | France beat Wallabies for first win on Australian soil in 31 years

Melvyn Jaminet booted seven penalties as a beefed-up France stunned the Wallabies 28-26 to post…

8 mins ago

Australian Governments climate inaction to blame for Reef World Heritage In Danger recommendation

UNESCO has sent a powerful message to the Australian Government: the Great Barrier Reef should…

8 mins ago

Australia hands Team USA men’s basketball another shocking defeat ahead of Tokyo Olympics

This is just the fourth exhibition loss for the United States since 1992 when pros…

8 mins ago

Eating Boston lobster in Hong Kong could hasten demise of North Atlantic whale species

Hongkongers have been urged to avoid eating Boston lobster after a leading green group issued…

8 mins ago

Australia doomed to lag behind the world on Covid freedom

Australia doomed to lag behind the world on Covid freedom  Herald Sun

8 mins ago

Sony reportedly showed off its next-generation PSVR at a developer’s conference

Sony already hinted that it's working on a new PlayStation VR headset, promising "dramatic leaps"…

10 mins ago