FAUTLReports

The Mac Malware of 2024

2025-01-01

Author: Patrick Wardle

malware_types:ransomware file_types:rar architecture:arm malware_types:loader architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools file_types:rtf

This Meeting Should Have Been an Email

2024-07-15

Objective-See

Author: Patrick Wardle

file_types:zip file_types:exe file_types:html architecture:x86_64 file_types:python malware_types:downloader malware_types:backdoor file_types:javascript platforms:macos file_types:mach-o

Identifying x86_64 ELF Symbols in Stripped Binaries using AI

2024-05-02

RevEng.AI

file_types:pdf file_types:bin architecture:x86_64 file_types:python file_types:elf file_types:c platforms:debian disassembler:ghidra

Apple Gets an 'F' for Slicing Apples

2024-02-22

Objective-See

Author: Patrick Wardle

architecture:arm malware_types:loader architecture:x86_64 file_types:so file_types:macho file_types:cpp platforms:macos file_types:mach-o debugger:lldb file_types:dylib

Why Join The Navy If You Can Be A Pirate?

2024-01-15

Objective-See

Author: Patrick Wardle

file_types:zip file_types:bin architecture:x86_64 malware_types:downloader malware_types:virus techniques:persistence malware_types:trojan file_types:xml platforms:macos file_types:mach-o

Analyzing DPRK's SpectralBlur

2024-01-04

Objective-See

Author: Patrick Wardle

file_types:zip file_types:bin architecture:x86_64 file_types:sh file_types:so malware_types:backdoor techniques:encryption platforms:macos file_types:mach-o debugger:lldb

The Mac Malware of 2023

2024-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:ruby file_types:zip platforms:linux file_types:dat architecture:x86_64 file_types:python techniques:sandbox file_types:mach-o techniques:malware analysis tools

It's Turtles All The Way Down

2023-11-30

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:zip platforms:linux file_types:txt architecture:arm architecture:x86_64 file_types:so malware_types:trojan architecture:arm64 file_types:mach-o

Ironing out (the macOS) details of a Smooth Operator (Part II)

2023-04-01

Objective-See

Author: Patrick Wardle

architecture:x86_64 file_types:so architecture:x64 file_types:xml file_types:json platforms:macos file_types:mach-o debugger:lldb file_types:dylib techniques:anti-analysis

Ironing out (the macOS) details of a Smooth Operator (Part I)

2023-03-29

Objective-See

Author: Patrick Wardle

file_types:dll architecture:arm malware_types:loader architecture:x86_64 file_types:so architecture:x64 platforms:macos file_types:mach-o debugger:lldb techniques:anti-analysis

Where there is love, there is ...malware?

2023-02-14

Objective-See

Author: Patrick Wardle

architecture:x86_64 file_types:so file_types:php malware_types:backdoor techniques:persistence file_types:xml platforms:macos file_types:mach-o debugger:lldb disassembler:hopper

The Mac Malware of 2022

2023-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:zip platforms:linux malware_types:loader architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools cve:cve-2019-8526

From The DPRK With Love

2022-05-09

Objective-See

Author: Patrick Wardle

file_types:zip file_types:bin architecture:x86_64 file_types:so file_types:php file_types:javascript platforms:windows file_types:css file_types:json file_types:mach-o

Analyzing OSX.DazzleSpy

2022-01-25

Objective-See

Author: Patrick Wardle

architecture:arm architecture:x86_64 techniques:persistence file_types:xml platforms:macos file_types:mach-o cve:cve-2019-8526 file_types:objective-c file_types:pptx file_types:docx

SysJoker, the first (macOS) malware of 2022!

2022-01-11

Objective-See

Author: Patrick Wardle

file_types:zip platforms:linux file_types:txt file_types:bin architecture:x86_64 file_types:sh file_types:so platforms:windows architecture:arm64 file_types:mach-o

The Mac Malware of 2021

2022-01-01

Objective-See

Author: Patrick Wardle

file_types:zip platforms:linux architecture:arm architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools malware_types:password stealer cve:cve-2021-1789

Analyzing OSX.CDDS (MacMa)

2021-11-11

Objective-See

Author: Patrick Wardle

file_types:bin architecture:x86_64 file_types:sh file_types:bash malware_types:virus malware_types:backdoor techniques:privilege escalation malware_types:keylogger malware_types:zero-day platforms:macos

Analysis of CVE-2021-30860

2021-09-16

Objective-See

Author: Tom McGuire

architecture:x86_64 file_types:so techniques:sandbox platforms:macos platforms:ios file_types:mach-o disassembler:hopper cve:cve-2015-6778 cve:cve-2020-1910 cve:cve-2009-1858

Made in China: OSX.ZuRu

2021-09-14

Objective-See

Author: Patrick Wardle

file_types:zip file_types:txt file_types:bin malware_types:loader architecture:x86_64 file_types:python file_types:sh file_types:so file_types:php file_types:mach-o

All Your Macs Are Belong To Us

2021-04-26

Objective-See

Author: Patrick Wardle

file_types:zip file_types:pdf file_types:bin architecture:x86_64 file_types:python file_types:sh file_types:so file_types:mach-o file_types:objective-c cve:cve-2021-30657

Malware Analysis Reports