ICMacOS

Search everything

Mentions · 7d2
Mentions · 30d3
All mentions3
First seenOct 12, 2026
Last mentioned3d ago

Timeline

3 articles · newest first

ICMacOS Mac malware sold for $699 a week with remote commands

Version 2 adds a WebSocket shell and LaunchAgent persistence while still stealing developer and wallet secrets.

Cyber Security NewsOct 27, 03:50 UTC · 3d agoMalware 2 sources1

ICMacOS macOS stealer gains RAT capabilities with reboot persistence

ICMacOS now includes WebSocket remote commands and LaunchAgent persistence that survives reboots.

GBHackersupdated Oct 27, 03:50 UTC · 3d agofirst Oct 26, 12:17 UTC · 4d agoMalware 2 sources1

Inside ICMacOS: From an Infostealer to a Persistent RAT

SOCRadar analyzes ICMacOS, macOS malware that evolved from an infostealer into a persistent RAT.

SOCRadarOct 12, 09:38 UTC · 18d agoMalware11 · 2 reads

Appears with

macOSproduct · 3
Applevendor · 3
SOCRadarorganization · 3
GlowComathreat actor · 2
Moonlock Laborganization · 1
Moonlockorganization · 1
Icarus macOSmalware · 1
MADHASHthreat actor · 1
Appleorganization · 1
Mac usersvictim · 1

Entities are extracted by the model from each article. First seen Oct 12, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.