Checklist 423: Less Consumer Protection and More OS Updates

CFPB scraps data broker rules as Apple rolls out major OS updates fixing 100+ security flaws—privacy is still up to you. Update now, stay safe.

Checklist 422: Every Day Is World Password Day

94% of passwords are reused—including by top officials. Weak, repeated logins like “123456” still top lists in homes, offices, even government.

BlueNoroff

also known as HEUR:Trojan-Downloader.OSX.Lazarus.gen

• • Type:
  • Hybrid Threat
• • Platform:
  • Mac OS 9
• • Last updated:
  • 11/28/24 7:01 am
• • Threat Level:
  • High

Description

This malware installs a backdoor for remote command execution and abuses the zshenv configuration file for persistence, bypassing macOS’s security mechanisms like Login Items notifications.

BlueNoroff Threat Removal

MacScan can detect and remove BlueNoroff Hybrid Threat from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

Checklist 421: Strengthening AirPlay and Turning Off TV Tracking

AirPlay flaws and smart TV tracking expose user privacy risks—learn how to secure your devices and limit data collection.

Checklist 420: Hacking the Crosswalk

Apple patches zero-days, hacked crosswalks mock billionaires, and Mac users get privacy tips—from VPNs to app permissions and browser safety.

Checklist 419: Tax Scams and Crossed Signals

Tax scams spike as April 15 nears; meanwhile, a Signal chat slip exposes U.S. security flaws—White House blames iPhone’s contact auto-suggest.

Checklist 418: VPNs, the App Store, and the Chinese Army

VPNs in app stores aren’t always safe—some are tied to China’s military. Free isn’t always better. Research before you trust.

Checklist 417: 23andMe Goes Bankrupt and a Crash Course in Signal

23andMe’s data risks grow post-bankruptcy; meanwhile, officials’ misuse of Signal raises questions—tech isn’t the issue, user behavior is.

Checklist 416: Malware as A.I. and A.I. Be Trippin’

AI’s accuracy issues spark legal action as ChatGPT falsely accuses users of crimes, while DeepSeek malware scams put privacy and security at risk.

Checklist 415: Voice Clones and Paper Problems, Revisited

Lee Enterprises tackles cyberattack recovery, while Consumer Reports urges AI voice cloning safeguards to protect users from scams.

Checklist 414: Meta and Apple Think of the Children

Cybercriminals are using physical mail for malware scams and fake ransomware demands, exploiting trust in letters while risking federal charges.

Checklist 413: Googling Good News

Google is enhancing privacy with easier personal info removal from Search and replacing SMS 2FA with QR codes for better security.

Checklist 412: DeepSeek Concerns and Newspapers Held for Ransom

Lee Enterprises tackles cyberattack recovery, while Consumer Reports urges AI voice cloning safeguards to protect users from scams.

Checklist 411: Virtual Dates and Zero-Day Updates

Romance scams and Apple’s latest updates fix — a critical iOS exploit, add security patches, and quietly re-enable Apple Intelligence — check your settings!

Checklist 410: OCR Malware and Grubhub Date Theft

Grubhub and App Store breaches expose user data. Hackers target crypto wallets via malware and leak personal info.

Checklist 409: Change Healthcare’s Strange and Changing Story

Apple’s latest updates patch 240 security flaws, including an actively exploited bug. Meanwhile, Change Healthcare’s breach affects 190M—double initial reports.

Checklist 408: Family Passwords and Smishing, Revisited

Protect your family with secret passwords and avoid smishing scams—learn how AI is fueling new threats and simple steps to stay safe.

Checklist 407: Scams Sparked by SoCal Fires

Learn how scammers exploit crises like wildfires and smishing texts, and discover key tips to stay safe from phishing and fraud.

Checklist 406: Less Salt, More Logos

AT&T, Verizon secure networks post-Salt Typhoon hack; FCC debuts Cyber Trust Mark to boost IoT security with voluntary labeling.

North Korean Cyber Campaign Targets Cryptocurrency Firms with Hidden Risk Malware on macOS

North Korean hackers deploy Hidden Risk, a macOS malware disguised as crypto news. Delivered via phishing emails, it bypasses Apple’s defenses, threatening cryptocurrency firms’ data and operations.