"New Mac Malware Samples Underscore Growing Threat"

Some malware samples that emerged in 2021 further proved that Apple's technologies are not invulnerable to attacks. The security researcher, Patrick Wardle, released a list of new Mac malware threats that emerged last year, identifying the infection vector, installation, persistence mechanisms, and other features for each malware sample. His list is intended to give security professionals better insight into threats facing macOS at a time when its use increased, largely due to the shift to remote work during the COVID-19 pandemic. A 2021 survey of 300 IT professionals revealed that employee use of Apple devices had increased significantly. Over 50 percent of the respondents reported that requests for Apple devices had also grown. Wardle's list consists of eight new malware samples that target macOS. It includes ElectroRAT, a cross-platform Remote Access Trojan (RAT), and Silver Sparrow, a malware tool that targets Apple's M1 chip. It also includes a cross-platform password stealer called XLoader as well as a macOS implant dubbed MacMa. Each of the malware samples was discovered by different antivirus and security firms. Last year's most significant Mac malware threats fell under the categories of cryptominers, adware, information stealers, and cross-platform Trojans. Although Macs have some security advantages, they are becoming less effective because malware is increasingly targeting browser plugins instead of the underlying OS. Malware developers are also creating more cross-platform applications independent of the OS. Jaron Bradley, macOS Detections Manager at Jamf, pointed out that threat actors had put a lot of effort into attacking Macs in 2021. Such efforts included looking for new zero-day vulnerabilities and exploiting them to deliver Mac-specific malware. The distribution of Mac-specific malware implementing zero-day bypasses shows that attackers are becoming more familiar with macOS and willing to spend time building these exploits. This article continues to discuss Wardle's list of new Mac malware samples that surfaced in 2021 and the misperception about Macs. 

Dark Reading reports "New Mac Malware Samples Underscore Growing Threat"