Malwarecritical
Sophisticated attackers used DazzleSpy macOS backdoor in watering hole attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-8526 | Use-After-Free Local Privilege Escalation in Apple macOS | 7.8 | <1% | KEV | KEV |
| CVE-2021-30869 | Type Confusion in Apple iOS, iPadOS and macOS Allows Kernel Code Execution | 7.8 | 4% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | fightforhk.com | activists. One of the websites used to infect HK dissidents fightforhk[.]com seems to have been created from scratch for that unique p |
From the original article
3 min read at securityaffairs.com
Experts found an undocumented macOS backdoor, dubbed DazzleSpy, that was employed in watering hole attacks aimed at politically active individuals in Hong Kong. Researchers from ESET have spotted an undocumented macOS backdoor, dubbed DazzleSpy, that was employed in watering hole attacks aimed at politically active individuals in Hong Kong.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.