If victims fail for this poorly executed social engineering attack, a hefty file of 34MB is downloaded on their system and placed into macOS/tmp/script directory. However, these bad actors “are asking users to infect themselves,” he said.

Typically, hackers use rather clever social engineering skills to inject computers with viruses. įirst of all, he criticized malware's distribution methods. Another security researcher and founder of Digita Security Patrick Wardle, has called the malware “dumb,” giving it a rather amusing name of OSX.Dummy. The malicious program was first discovered and characterized by DotchSec founder Remco Verhoef, which he described in SANS ISC InfoSec blog on Friday. Security expert dubbed the malware “dumb” This allows bad actors to gain root access to Mac OS machine and run code on it. According to researchers, they share small snippets within the chat group and those who download them end up installing malicious binary code into their systems.Īs soon as the payload is distributed, OSX.Dummy tries to contact a remote Command & Control server, owned by cybercriminals. Hackers have been infiltrating groups and pretending to be administrators of certain websites. It seems like cybercriminals are targeting users who are discussing digital currency market on popular chatting platforms Discord and Slack. However, users who get tricked into installing OSX.Dummy virus put their privacy and sensitive data at risk. The malicious code is relatively unsophisticated, as virus authors use primitive infection techniques. Security researchers have recently discovered a new string of Mac OS malware attacks. Mac OS malware is targeting crypto-oriented groups on Discord and Slack chat apps Hackers are targeting users who discuss cryptocurrencies on Discord and Slack

Crypto virus mac