This makes it easy to spot, given any reason to look at the infected machine closely (such as unusual network traffic). As the company summarizes, “Ironically, despite the age and sophistication of this malware, it uses the same old unsophisticated technique for persistence that so many other pieces of Mac malware do: a hidden file and a launch agent. Malwarebytes’ own software will do the job, detecting it as. Regardless of whether the malware is really that old or just appears to be, it’s relatively easy to discover and eradicate. But it’s not been untouched since its creation, with code referencing OS X 10.10 Yosemite.

Some of the code made calls to functions that haven’t existed since before OS X, marking the code as evidence that Macs have indeed suffered from malware since the earliest days. The code is simple but ingenious, made of only two files but capable of communicating with a remote command and control server, and of taking screenshots and sending them along. Here’s why WWDC could be a ‘critical event’ for Apple It’s time for Apple to finally kill the Mac Pro for good Is macOS more secure than Windows? This malware report has the answer

Malwarebytes apple