Hernandez noted that the watering hole campaign leveraged a vulnerability (CVE-2021-30869) that did not affect the then-current version of macOS Big Sur, but was exploitable on macOS Catalina.Īpple later released a patch for Catalina, as well as for iOS 12.5.5, on September 23 (as Intego noted here). In this case, evidently the targeted class was people advocating for democracy in Hong Kong.Įrye Hernandez from Google’s Threat Analysis Group (TAG) first published about the campaign on November 11.

The campaign leveraged what’s known as a watering hole attack-where a group of people with a common interest is specifically targeted for infection. In November 2021, teams from Google and ESET were independently researching a Mac malware campaign. What do we know about DazzleSpy-affiliated domains?.How can one remove or prevent DazzleSpy and other threats?.What does DazzleSpy do to an infected computer?.Let’s examine this threat and what makes it unique and interesting. Intego detects this malware’s various components as OSX/DazzleSpy, OSX/CDDS, OSX/, and JS/. Intriguingly, it has the hallmarks of a state-sponsored, cyber-espionage campaign. Malware DazzleSpy Mac Malware Used in Targeted AttacksĭazzleSpy is the latest Mac malware to make headlines.

Best mac malware checker