A New Highly Sophisticated Remote access Trojan (RAT) Called “MacSpy” advertised for Free which Described as “most sophisticated Mac spyware ever” Specifically target for Mac Users since Mac users are growing Rapidly.
MacSpy Spyware Spreading through Advertisement Idea of malware-as-a-service (MaaS) and they Claimed that they have noticed a lack of “sophisticated malware for Mac users” and they believe that “people were in need of such programs on MacOS”. So they created MacSpy.
Malware Authors are not providing any automated service of signing up for their service. instead, of that, to receive the copy of MacSpy, We need to Manual send an Email to MacSpy Author ([email protected]) with our Desire Username and password.
Also Read Malware strains targeting all versions of MacOSX clients
Once they Verified our Mail and our Desire credentials, they will send a reply Mail with ZIP file which Contains the Copy of the MacSpy Spyware also with Login Link.
According to Mail instruction, All the Communication should be Established through TOR including Download the ZIP file.
Once ZIP has been Extracted you can see the file called Archive. you can copy and place the file into targeted MAC.
According to alienvault Research, the archive contains four files:
- Mach-O 64-bit executable called ‘updated’
- Mach-O 64-bit executable called ‘webkitproxy’
- Mach-O 64-bit dynamically linked shared library called ‘libevent-2.0.5.dylib’
- Config file
After Copy the File you can find the executable called ‘Updated’. Double Click the Executable and then Suddenly Window will be opened and within few second Screen will be Disappeared.
MacSpy Spyware will be successfully injected once all the above steps will be done.
Also Read Linux malware that Targets Raspberry Pi for Mining Cryptocurrency
MacSpy Advance Futures
These are the MacSpy advance Futures that Discovered by alienvault
Sophisticated MacSpy Activities with OS X
1.They are no Tracking Function could be Associated with all the communication established Via TOR.
2.This Spyware using very less CPU power and memory, so that it makes completely undetectable for Mac user.
3.Each and Every second it captures the Screenshot with Multiple Monitor Support.
4.MacSpy used to Log each and every Keystroke Activities in Clear text format.
5.All the iCloud photos will be sync and Acquire all photos.
6. It is Capable of Recording the voice and sounds Continuously Even after user turn of the Micro Phone.
7. It can learn the Browser Pattern and Retrieve the Browsing History, Download History from Safari and Chrome.
To read the full technical analysis at alienvault Blog page.
