Checklist 340: QR Codes and Magic Doors

Apple opposes UK’s encryption-compromising laws, risking service withdrawal. Balancing security and law enforcement needs in focus.

Checklist 339: Common Sense Security Steps

Uncover Intel-based Macs’ ‘Downfall’ vulnerability & iPhone Bluetooth risks, plus ATM card skimming tactics. Stay secure with insights on emerging threats.

Checklist 338: Macs and Keyboards and Required Reasons

Dark web threats to macOS surge 1000%, deep learning steals keystrokes via mic with 95% accuracy. Apple tightens App Store security, requires API justification by Spring 2024.

Realst Stealer

also known as HEUR:Trojan-PSW.OSX.HashBreaker, HEUR:Trojan-PSW.OSX.HashBreaker.e

• • Type:
  • Hybrid Threat
• • Platform:
  • Mac OS 9
• • Last updated:
  • 12/30/24 6:18 pm
• • Threat Level:
  • High

Description

Realst Stealer is a Rust-based infostealer which targets macOS cryptocurrency wallets, stored passwords and browser data, designed to infect macOS 14 Sonoma (unreleased at this time publicly)

Realst Stealer Threat Removal

MacScan can detect and remove Realst Stealer Hybrid Threat from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

Checklist 337: I, Charger

Electric vehicle chargers are vulnerable to hacking, raising security concerns for power grids. Efforts are underway to strengthen their security, but challenges remain. Protect yourself from online threats with tips to avoid scam ads.

Checklist 336: Rapid Security Response (and Retreat)

This week we discuss Apple’s Rapid Security Response faces challenges with recent updates and a high school which accidentally reset all students’ passwords, inviting a security breach.

Scam search result ads: What to know and how to protect yourself

Scam search result ads: How to spot them and how to protect yourself.

VBS

• • Type:
  • Hybrid Threat
• • Platform:
  • Microsoft Windows
• • Last updated:
  • 07/13/22 5:17 pm
• • Threat Level:
  • High

Description

VBS is a hybrid threat that comes packaged as a driver that includes Mac,Win,Linux.

VBS Threat Removal

MacScan can detect and remove VBS Hybrid Threat from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

CloudMensis macOS spyware

• • Type:
  • Spyware
• • Platform:
  • Mac OS X
• • Last updated:
  • 07/25/22 3:28 pm
• • Threat Level:
  • High

Description

CloudMensis macOS spyware is spyware that uses cloud storage as its C&C channel and to exfiltrate documents, keystrokes, and screen captures from compromised Macs

CloudMensis macOS spyware Threat Removal

MacScan can detect and remove CloudMensis macOS spyware Spyware from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

Agent

also known as HEUR:HackTool.Linux.Agent.gen

• • Type:
  • Hack Tool
• • Platform:
  • Mac OS X
• • Last updated:
  • 02/13/23 8:15 pm
• • Threat Level:
  • High

Description

Agent is a hack tool that gains unauthorized access on the local system.

Agent Threat Removal

MacScan can detect and remove Agent Hack Tool from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

FakeTerm

• • Type:
  • Malware
• • Platform:
  • Mac OS X
• • Last updated:
  • 09/15/21 10:09 pm
• • Threat Level:
  • High

Description

FakeTerm is malware.

FakeTerm Threat Removal

MacScan can detect and remove FakeTerm Malware from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

ZuRu

also known as Trojan.OSX.Zuru.gen

• • Type:
  • Malware
• • Platform:
  • Mac OS X
• • Last updated:
  • 01/17/23 11:04 pm
• • Threat Level:
  • High

Description

Zuru is malware that embeds itself with legitimate macOS applications and offered to be downloaded via suspicious websites. It uses Python to investigate a compromised system and launches payloads to further spread and collect information.

ZuRu Threat Removal

MacScan can detect and remove ZuRu Malware from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

Turla Snake

also known as HEUR:Trojan.OSX.Turla.a

• • Type:
  • Trojan Horse
• • Platform:
  • Mac OS 9
• • Last updated:
  • 06/29/23 3:27 pm
• • Threat Level:
  • High

Description

Turla Snake is a trojanized Flash Player update installer that installs a backdoor to exfiltrate data.

Turla Snake Threat Removal

MacScan can detect and remove Turla Snake Trojan Horse from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

AMOS

also known as Generic.MAC.Stealer.I.7826BBE5, HEUR:Trojan-Downloader.OSX.Amos.gen, HEUR:Trojan-PSW.OSX.Amos.ah, HEUR:Trojan-PSW.OSX.Amos.ai, HEUR:Trojan-PSW.OSX.Amos.an, HEUR:Trojan-PSW.OSX.Amos.as, HEUR:Trojan-PSW.OSX.Amos.av, HEUR:Trojan-PSW.OSX.Amos.c, HEUR:Trojan-PSW.OSX.Amos.h, HEUR:Trojan-PSW.OSX.Amos.osa, HEUR:Trojan-PSW.OSX.Amos.s, HEUR:Trojan-PSW.OSX.Amos.w, MacOS:AMOS-E, MacOS:AMOS-E[Trj], UDS:DangerousObject.Multi.Generic, UDS:Trojan-PSW.OSX.Amos, UDS:Trojan-PSW.OSX.Amos.ag, UDS:Trojan-PSW.OSX.Amos.d

• • Type:
  • Trojan Horse
• • Platform:
  • Mac OS 9
• • Last updated:
  • 08/28/25 5:12 pm
• • Threat Level:
  • High

Description

AMOS is a trojan that is capable of stealing various pieces of information from a macOS system such as iCloud keychain passwords, system information, browser cookies, etc.

AMOS Threat Removal

MacScan can detect and remove AMOS Trojan Horse from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

XLoader

also known as Formbook, HEUR:Trojan.OSX.Agent.gen

• • Type:
  • Malware
• • Platform:
  • Mac OS X
• • Last updated:
  • 09/20/23 4:35 pm
• • Threat Level:
  • High

Description

XLoader is malware.

XLoader Threat Removal

MacScan can detect and remove XLoader Malware from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

LuckyMouse

• • Type:
  • Hybrid Threat
• • Platform:
  • Mac OS X
• • Last updated:
  • 08/22/22 5:27 pm
• • Threat Level:
  • High

Description

LuckyMouse is a backdoor that is disguised as the Eletron App. Classified as APT: China LuckyMouse / Iron Tiger/ HyperBro C2/ Electron app

LuckyMouse Threat Removal

MacScan can detect and remove LuckyMouse Hybrid Threat from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

EggShell

• • Type:
  • Malware
• • Platform:
  • Mac OS X
• • Last updated:
  • 03/18/21 7:27 pm
• • Threat Level:
  • High

Description

EggShell is malware.

EggShell Threat Removal

MacScan can detect and remove EggShell Malware from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

SmoothOperator

also known as Trojan-Downloader.OSX.DllHijack.a

• • Type:
  • Trojan Horse
• • Platform:
  • Mac OS 9
• • Last updated:
  • 04/11/23 12:16 am
• • Threat Level:
  • High

Description

SmoothOperator is a trojan presents a Supply Chain Compromise for the 3CXDesktop App

SmoothOperator Threat Removal

MacScan can detect and remove SmoothOperator Trojan Horse from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

Rustbucket

also known as PDF/BlueNoroff, Trojan.OSX.Nukesped, Trojan.PDF.Agent

• • Type:
  • Trojan Horse
• • Platform:
  • Mac OS 9
• • Last updated:
  • 07/07/23 10:25 pm
• • Threat Level:
  • High

Description

Rustbucket is a trojan horse that is disguised as a PDF reader app but will download various payloads to the target’s system such as run arbitrary commands to gather system details and encompassing information, as well as perform various actions.

Rustbucket Threat Removal

MacScan can detect and remove Rustbucket Trojan Horse from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan

WildPressure

• • Type:
  • Malware
• • Platform:
  • Mac OS X
• • Last updated:
  • 07/08/21 10:02 pm
• • Threat Level:
  • High

Description

WildPressure is malware.

WildPressure Threat Removal

MacScan can detect and remove WildPressure Malware from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.

Download MacScan