Findings will be included in part II of this blog posting :) While I wait for a kext signing certificate from Apple I'll going to check this out, as KAuth interface appears more stable than the prototype of the MAC policy function. Until details emerge I'm going to assume this is no more of a threat than the 100s of other trojans that people unwittingly install when they download porn or pirated software.Update: Several people have reached out to me (mahalo!) to mention that the KAuth API can also be used to monitor process creation from a kext.

This article implies it spreads via email but doesn't give any details except that the criminal that created this trojan didn't want it used that way. Others are claiming that it is being sent in email campaigns. I did find this: ' In the upcoming articles we share the technical details of the malware’s macOS version which reveal how XLoader operates under the hood.' I didn't find anything about how it propagates or how it gets around standard OS and browser protections. I missed where that article gives any actionable information. There's a LOT more detail on this in the report cited by the Appleinsider editor. Cyber Command shut down 'particular servers belonging to the company behind XLoader”? Are hackers now referred to as ‘companies’? Will XLoader be listed on the NYSE next? So which users are being tricked into installing this malware? Only the stupid ones or every Mac user on the planet? Why can’t the U.S.

Yes, when you reach a certain age the bad guys beat a path to your door trying to trick you into giving them money, data, or both. Same goes for any email or text I get claiming I need to resolve some issue or lose money. Marshals’s office telling me I’m involved in criminal activity, and Amazon telling me there’s a $900 order on my account I need to verify. I get phone calls almost every day from the IRS telling me my SSA check has been canceled, the IRS telling me there’s a warrant out for my arrest, the U.S. Will AppleInsider be starting a web page for users to report, “Yeah, I got nailed by XLoader”? I’m being sarcastic, of course, but we never, EVER, hear actual numbers from security researchers of how many are being compromised. Cyber Command shut down ' particular servers belonging to the company behind XLoader”? Are hackers now referred to as ‘companies’? Will XLoader be listed on the NYSE next? ' and users can be tricked into giving it access to passwords, clipboard, and allowing it to take screenshots.

How to detect malware on macbook pro