FAUTLReports

Leaking Passwords (and more!) on macOS

2025-03-20

Author: Noah Gregory

malware_types:ransomware techniques:system calls file_types:so file_types:macho malware_types:backdoor techniques:privilege escalation platforms:macos platforms:ios cve:cve-2024-5447 cve:cve-2024-54471

The Mac Malware of 2024

2025-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:rar architecture:arm malware_types:loader architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools file_types:rtf

The Hidden Treasures of Crash Reports

2024-08-13

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:so file_types:c platforms:windows platforms:macos platforms:ios architecture:arm64

Latrodectus Affiliate Resumes Operations Using Brute Ratel C4 Post Operation Endgame

2024-06-24

RevEng.AI

malware_types:ransomware file_types:dll file_types:pdf malware_types:loader file_types:python file_types:javascript techniques:sandbox platforms:windows server techniques:string obfuscation file_types:msi

MMD-0069-2024 - An old ELF Ransomware pivoted crypto (OpenSSL to PolarSSL) Linux/Encoder.1-2

2024-06-19

MalwareMustDie

Author: unixfreaxjp

file_types:apk malware_types:ransomware file_types:rar file_types:dll file_types:ruby file_types:zip platforms:linux file_types:txt architecture:x86 file_types:pdf

The Mac Malware of 2023

2024-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:ruby file_types:zip platforms:linux file_types:dat architecture:x86_64 file_types:python techniques:sandbox file_types:mach-o techniques:malware analysis tools

It's Turtles All The Way Down

2023-11-30

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:zip platforms:linux file_types:txt architecture:arm architecture:x86_64 file_types:so malware_types:trojan architecture:arm64 file_types:mach-o

The LockBit ransomware (kinda) comes for macOS

2023-04-16

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:dll file_types:zip platforms:linux file_types:txt file_types:dat architecture:arm file_types:python file_types:json file_types:mach-o

A tale of Phobos - how we almost cracked a ransomware using CUDA

2023-02-23

CERT.PL

Author: Jarosław Jedynak

malware_types:ransomware file_types:so techniques:decryptor source_tag:analysis source_tag:malware

The Mac Malware of 2022

2023-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:zip platforms:linux malware_types:loader architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools cve:cve-2019-8526

The Mac Malware of 2020

2021-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware platforms:linux file_types:dat architecture:arm architecture:x86_64 file_types:python file_types:javascript file_types:mach-o techniques:malware analysis tools techniques:kernel-mode rootkit

Adventures in Anti-Gravity (Part I)

2020-11-03

Objective-See

Author: Patrick Wardle

malware_types:ransomware platforms:linux file_types:bin architecture:x86_64 file_types:python file_types:php techniques:persistence malware_types:spyware platforms:macos file_types:mach-o

OSX.EvilQuest Uncovered (part two)

2020-07-03

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:rar file_types:zip file_types:txt file_types:pdf file_types:dat architecture:x86_64 file_types:json file_types:pptx file_types:rtf

OSX.EvilQuest Uncovered (part one)

2020-06-29

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:rar file_types:zip file_types:txt file_types:dat architecture:x86_64 file_types:python techniques:sandbox file_types:mach-o file_types:rtf

Writing a File Monitor with Apple's Endpoint Security Framework

2019-09-17

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:bin file_types:so file_types:c techniques:persistence platforms:macos file_types:zsh

Writing a Process Monitor with Apple's Endpoint Security Framework

2019-09-16

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:bin file_types:so file_types:c techniques:persistence techniques:encryption platforms:macos platforms:ios debugger:lldb file_types:zsh

An Insecurity in Apple's Security Framework?

2018-05-02

Objective-See

malware_types:ransomware file_types:so file_types:c techniques:encryption file_types:cpp file_types:swift platforms:macos platforms:ios debugger:lldb

Mac Malware of 2017

2017-12-23

Objective-See

malware_types:ransomware file_types:ruby file_types:zip file_types:txt file_types:pdf file_types:bin architecture:x86_64 file_types:python file_types:json file_types:mach-o

OSX/MacRansom: Analyzing new Ransomware Targeting Macs

2017-06-12

Objective-See

malware_types:ransomware file_types:txt file_types:bin file_types:so file_types:bash techniques:persistence techniques:encryption platforms:macos debugger:lldb techniques:anti-analysis

Mole ransomware: analysis and decryptor

2017-05-30

CERT.PL

Author: Jarosław Jedynak

malware_types:ransomware file_types:so techniques:encryption techniques:decryptor source_tag:analysis source_tag:malware source_tag:tools

Malware Analysis Reports