Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

New AdLoad Variant Bypasses Apple's Security Defenses to Target macOS Systems

The Hacker Newsby @TheHackersNews ()2 min read2
Analyze CVE-2021-30657 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2021-30657
Actively Exploited Gatekeeper Bypass in Apple macOS
5.569%KEV
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
domainplayer.apphain to deploy malicious droppers that masquerade as a fake Player.app to install malware. What's more, the droppers are signed wi

From the original article

2 min read at thehackernews.com

A new wave of attacks involving a notorious macOS adware family has evolved to leverage around 150 unique samples in the wild in 2021 alone, some of which have slipped past Apple's on-device malware scanner and even signed by its own notarization service, highlighting the malicious software ongoing attempts to adapt and evade detection.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.