#FF00AA

@MarkVillacampa

There’s a new macOS malware targeting developers via an infected Xcode project.

It fully compromises the browser to steal… everything it can

🤯

XCSSET Mac Malware Infects Xcode Projects Uses 0Days

Further investigation led us to a developer’s Xcode project that contained XCSSET source malware, which leads to a rabbit hole of malicious payloads. Most notable in our investigation is the discovery of two zero-day exploits.