![\"\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/05\/YetXAnother.jpg\")
Researchers from Check Point Software Technologies have identified a new strain of malware dubbed OSX\/Dok that has been found infesting macOS users. The new malware has been primarily found in Europe, and is being spread primarily via phishing campaigns, using emails spoofed to appear as though they\u2019re coming from official sources.<\/p>\n
One example recently discovered by the research team appears to come from the Swiss Government, warning recipients that there were errors in their tax returns. Attached to this email is a file called \u201cDokument.zip.\u201d<\/p>\n
One of the intriguing things about the malware is that it\u2019s digitally signed with a valid Apple developer\u2019s certificate. These certificates are only issued to certified developers, and they\u2019re important because they\u2019re required in order to publish apps in the official Mac App Store. Also, because the presence of a signed certificate means that they can be installed without triggering security errors that would normally require a manual override.<\/p>\n
All it takes to install the malicious code is to unzip the file. Once it\u2019s unzipped, the software will modify the infected PC\u2019s network settings and reroute web traffic through a proxy server located somewhere on the TOR network. A TOR client is installed automatically in the background when the file is unzipped.<\/p>\n
From there, every move you make on the web is monitored, and your activity is reported in real time to whomever controls the software, allowing the hackers to steal a variety of personal data and logins.<\/p>\n
What isn\u2019t known at this time is whether the hackers provided false credentials and paid to get a developer\u2019s certificate, or whether they stole one from an innocent third party. In either case, this new strain of malware is one of the most advanced security professionals have ever seen, and although Apple has patched their OS to nullify this threat, researchers warn that there may well be other strains of this code that remain undetected.<\/p>\n","protected":false},"excerpt":{"rendered":"
Researchers from Check Point Software Technologies have identified a new strain of malware dubbed OSX\/Dok that has been found infesting macOS users. The new malware has been primarily found in Europe, and is being spread primarily via phishing campaigns, using emails spoofed to appear as though they\u2019re coming from official sources. One example recently discovered […]<\/p>\n","protected":false},"author":5,"featured_media":25331,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[34,30],"yoast_head":"\n