XCSSET Mac Malware: Infects Xcode Projects, Performs UXSS Attack on Safari, Other Browsers, Leverages Zero-day Exploits
released on 2020-08-14 @ 06:31:27 PM
Trend Labs has discovered an unusual infection related to Xcode developer projects. Upon further investigation, Trend Labs discovered that a developer's Xcode project at large contained the source malware, which leads to a rabbit hole of malicious payloads. Most notable in the investigation is the discovery of two zero-day exploits: one is used to steal cookies via a flaw in the behavior of Data Vaults, another is used to abuse the development version of Safari.