Threatline

Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. "The payloads are protected with javascript-obfuscator, using multiple techniques including RC4-protected strings, control-flow flattening, proxy functions, and operation wrappers," Check Point Research said in a

jsceal malware google authentication bypass google authentication stolen session cookies

7 more topics

credential harvesting surveillance traffic-interception javascript-obfuscator rc4-protected strings control-flow flattening check point research

The Hacker News

4 months ago

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's capable of harvesting sensitive data from compromised systems. Unlike other information stealers that are built on AppleScript droppers or Objective-C-based wrappers, CrashStealer is implemented in native C++, according to Jamf Threat Labs. "It validates the victim's login password locally before

crashstealer macos malware notarized dropper gatekeeper checks information stealer

7 more topics

harvesting sensitive data compromised systems applescript droppers objective-c-based wrappers native c++jamf threat labs validates login password locally