Categories: malwaresteal

This $49 malware could steal all your Mac data

(Image credit: solarseven / Shutterstock)

Security researchers from Check Point Research have observed a new strain of malware in the wild that has evolved to steal data from MacOS users.

This new strain is named “XLoader” and is derived from the infamous Formbook malware that has been active for over five years. While Formbook was initially created to be a simple keylogger, cybercriminals saw its potential has a universal tool which led its creator to stop sales of the product before relaunching it as XLoader.

While Formbook was used to primarily target Windows users in the past, after its rebranding as XLoader last year, it gained additional capabilities including the ability to target Macs.

What makes XLoader particularly dangerous is the fact that a license for the malware can be purchased on the Dark Web for as little as $49. Cybercriminals who purchase an XLoader license are then equipped to harvest log-in credentials, collect screenshots, log keystrokes and execute malicious files on victim’s machines.

XLoader malware

Check Point Research tracked XLoader activity between December of last year and June of this year to discover that over half (53%) of victims infected with the malware reside in the United States. Hong Kong was the second hardest hit at just nine percent followed by Mexico and Germany at five percent and three percent respectively.

As XLoader is spread using spam emails that contain malicious files, Check Point Research recommends that users avoid opening suspicious email attachments, visiting suspicious websites and using malware removal software to avoid having their Mac or PC infected.

However, if you think your system has become infected, the cybersecurity firm says that ordinary users should consult with a security professional as XLoader is stealth in nature and difficult to detect. 

More experienced users can run Autorun on their Macs, check their username in the OS, go to /Users/[username/Library/LaunchAgents directory and look for suspicious filenames to see if they are infected. Removing any suspicious files should then also remove XLoader from your system though this method isn’t for the inexperienced.

Head of cyber research at Check Point Software, Yaniv Balmas explained why cybercriminals are increasingly targeting Mac users, saying:

“While there might be a gap between Windows and MacOS malware, the gap is slowly closing over time. The truth is that MacOS malware is becoming bigger and more dangerous. Our recent findings are a perfect example and confirm this growing trend. With the increasing popularity of MacOS platforms, it makes sense for cyber criminals to show more interest in this domain, and I personally anticipate seeing more cyber threats following the Formbook malware family. I would think twice before opening up any attachments from emails I get from senders I don’t know.”

After living and working in South Korea for seven years, Anthony now resides in Houston, Texas where he writes about a variety of technology topics for ITProPortal and TechRadar. He has been a tech enthusiast for as long as he can remember

Read More

News Bot

Published by
News Bot
Tags: malwaresteal

Recent Posts

China will maintain stable macro polices in H2 to ensure growth

Please try another search Economy1 hour ago (Jul 30, 2021 07:17AM ET) © Reuters. FILE…

25 mins ago

Stocks Slide, Amazon Cut, China Stocks Reverse, PCE Prices

Please try another search Economy1 hour ago (Jul 30, 2021 06:43AM ET) © Reuters. By…

25 mins ago

Euro zone rebounds strongly, inflation above ECB target

Please try another search Economy55 minutes ago (Jul 30, 2021 07:46AM ET) © Reuters. FILE…

25 mins ago

Take Five: Jobs, crackdowns and a fork

© Reuters. FILE PHOTO: People line up outside a newly reopened career center for in-person…

25 mins ago

Japan eyes fresh stimulus package as new curbs weigh on growth

Please try another search Economy3 hours ago (Jul 30, 2021 05:36AM ET) © Reuters. FILE…

25 mins ago

Keep Cool All Day Long with Taco John’s Two New Cold Brews

Popular quick-service restaurant debuts premium Cold Brew Coffee Aug. 2 for $2 and will celebrate…

1 hour ago