More rogueware for Mac

Well, we congratulated Mac on its 25th birthday – and then found some new rogueware. We’ve got two versions of this piece of malware and detect them both as not-a-virus:FraudTool.OSX.iMunizator.

By now, Windows users are used to programs which claim to detect problems on the computer, and then “offer” the user the chance to buy software to fix the problem. Mac users haven’t been subjected to this, perhaps because malware traditionally doesn’t target Macs, but this program is a clone of MacSweeper, which we first detected last year.

This program ups the figures that we gave over the weekend, and sounds a warning to Mac users to start approaching security in the same way that Windows users do.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.