Important for any Dart/Flutter devs - compromised package (universal_file_viewer) on pub:
www.aikido.dev/blog/comprom...
www.aikido.dev/blog/comprom...
Compromised Flutter package on pub.dev contains XCSSET malware
We detected XCSSET malware inside a compromised Flutter package on pub.dev. Here is a full breakdown of the infection chain, propagation modules, and stealer logic we found inside.
www.aikido.dev
September 25, 2026 at 5:50 AM
Important for any Dart/Flutter devs - compromised package (universal_file_viewer) on pub:
www.aikido.dev/blog/comprom...
www.aikido.dev/blog/comprom...
XCSSET macOS malware returns with first new version since 2022
XCSSET macOS malware returns with first new version since 2022
Known for popping zero-days of yesteryear, Microsoft puts Apple devs on high alert
Microsoft says there's a new variant of XCSSET on the prowl for Mac users – the first new iteration of the malware since 2022.…
dlvr.it
February 17, 2025 at 1:47 PM
XCSSET macOS malware returns with first new version since 2022
A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories.
New XCSSET variant targets macOS devs via compromised Xcode projects
A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories.
www.bleepingcomputer.com
August 4, 2026 at 7:03 PM
A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories.
Microsoft spots fresh XCSSET malware strain hiding in Apple dev projects
Microsoft spots fresh XCSSET malware strain hiding in Apple dev projects
Upgraded nasty slips into Xcode builds, steals crypto, and disables macOS defenses
The long-running XCSSET malware strain has evolved again, with Microsoft warning of a new macOS variant that expands its bag of tricks while continuing to target developers.…
dlvr.it
September 26, 2025 at 3:26 PM
Microsoft spots fresh XCSSET malware strain hiding in Apple dev projects
Microsoft warns Apple developers and users about a new #XCSSET malware variant targeting #macOS, apps and stealing data.
Read: hackread.com/xcsset-malwa...
#CyberSecurity #Microsoft #Apple #Malware
Read: hackread.com/xcsset-malwa...
#CyberSecurity #Microsoft #Apple #Malware
New Variant of XCSSET Malware Targets macOS Notes and Wallets
Follow us on Bluesky, Twitter (X) and Facebook at @Hackread
hackread.com
February 18, 2025 at 2:56 PM
Microsoft warns Apple developers and users about a new #XCSSET malware variant targeting #macOS, apps and stealing data.
Read: hackread.com/xcsset-malwa...
#CyberSecurity #Microsoft #Apple #Malware
Read: hackread.com/xcsset-malwa...
#CyberSecurity #Microsoft #Apple #Malware
Microsoft Threat Intelligence has uncovered a new variant of the XCSSET malware, which is designed to infect Xcode projects, typically used by software developers building Apple or macOS-related applications. msft.it/63320sS0R0
XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory | Microsoft Security Blog
Microsoft Threat Intelligence has uncovered a new variant of the XCSSET malware, which is designed to infect Xcode projects, typically used by software developers building Apple or macOS-related applications.
msft.it
September 25, 2025 at 3:08 PM
Microsoft Threat Intelligence has uncovered a new variant of the XCSSET malware, which is designed to infect Xcode projects, typically used by software developers building Apple or macOS-related applications. msft.it/63320sS0R0
Microsoft warns of new XCSSET macOS malware variant targeting Xcode devs
Microsoft warns of new XCSSET macOS malware variant targeting Xcode devs
Microsoft Threat Intelligence reports that a new variant of the XCSSET macOS malware has been detected in limited attacks, incorporating several new features, including enhanced browser targeting, clipboard hijacking, and improved persistence mechanisms.
www.bleepingcomputer.com
September 25, 2025 at 11:10 PM
Microsoft warns of new XCSSET macOS malware variant targeting Xcode devs
A new variant of the XCSSET macOS modular malware has emerged in attacks that target users' sensitive information, including digital wallets and data from the legitimate Notes app. #MalwareAttacks #cybersecurity www.bleepingcomputer.com/news/securit...
Microsoft spots XCSSET macOS malware variant used for crypto theft
A new variant of the XCSSET macOS modular malware has emerged in attacks that target users' sensitive information, including digital wallets and data from the legitimate Notes app.
www.bleepingcomputer.com
February 17, 2025 at 7:16 PM
A new variant of the XCSSET macOS modular malware has emerged in attacks that target users' sensitive information, including digital wallets and data from the legitimate Notes app. #MalwareAttacks #cybersecurity www.bleepingcomputer.com/news/securit...
Microsoft Threat Intelligence reports that a new variant of the XCSSET macOS malware has been detected in limited attacks, incorporating several new features, including enhanced browser targeting, clipboard hijacking, and improved persistence mechanisms.
Microsoft warns of new XCSSET macOS malware variant targeting Xcode devs
Microsoft Threat Intelligence reports that a new variant of the XCSSET macOS malware has been detected in limited attacks, incorporating several new features, including enhanced browser targeting, clipboard hijacking, and improved persistence mechanisms.
www.bleepingcomputer.com
September 25, 2025 at 10:49 PM
Microsoft Threat Intelligence reports that a new variant of the XCSSET macOS malware has been detected in limited attacks, incorporating several new features, including enhanced browser targeting, clipboard hijacking, and improved persistence mechanisms.
Microsoft uncovers sleuthy new XCSSET MacOS malware campaign #Technology #Cybersecurity malware MacOS XCSSET
Microsoft uncovers sleuthy new XCSSET MacOS malware campaign
Microsoft warns of new version of the XCSSET infostealerIt comes with new obfuscation, infection, and persistence techniquesIt was seen in
puretech.news
March 14, 2025 at 5:30 AM
Microsoft uncovers sleuthy new XCSSET MacOS malware campaign #Technology #Cybersecurity malware MacOS XCSSET
The team found some new XCSSET behaviors to further infect additional Xcode projects / maintain persistence!
www.microsoft.com/en-us/securi...
www.microsoft.com/en-us/securi...
New XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects | Microsoft Security Blog
Microsoft Threat Intelligence has uncovered a new variant of XCSSET, a sophisticated modular macOS malware that infects Xcode projects, in the wild. Its first known variant since 2022, this latest XCS...
www.microsoft.com
March 11, 2025 at 6:29 PM
The team found some new XCSSET behaviors to further infect additional Xcode projects / maintain persistence!
www.microsoft.com/en-us/securi...
www.microsoft.com/en-us/securi...
Microsoft uncovers new variant of XCSSET macOS malware in targeted attacks
Microsoft uncovers new variant of XCSSET macOS malware in targeted attacks
Microsoft Threat Intelligence researchers found a new XCSSET macOS malware variant used in limited attacks.
securityaffairs.com
September 26, 2025 at 8:05 PM
Microsoft uncovers new variant of XCSSET macOS malware in targeted attacks
New XCSSET Malware Attacking macOS Users by Infecting Xcode Projects
New XCSSET Malware Attacking macOS Users by Infecting Xcode Projects
cybersecuritynews.com
February 17, 2025 at 12:34 PM
New XCSSET Malware Attacking macOS Users by Infecting Xcode Projects
Microsoft: New Variant of macOS Threat XCSSET Spotted in the Wild
New Variant of macOS Threat XCSSET Spotted in the Wild
www.darkreading.com
February 18, 2025 at 7:14 PM
Microsoft: New Variant of macOS Threat XCSSET Spotted in the Wild
A new variant of the XCSSET macOS modular malware has emerged in attacks that target users' sensitive information, including digital wallets and data from the legitimate Notes app.
Microsoft spots XCSSET macOS malware variant used for crypto theft
A new variant of the XCSSET macOS modular malware has emerged in attacks that target users' sensitive information, including digital wallets and data from the legitimate Notes app.
www.bleepingcomputer.com
February 17, 2025 at 4:05 PM
A new variant of the XCSSET macOS modular malware has emerged in attacks that target users' sensitive information, including digital wallets and data from the legitimate Notes app.
Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation Tactics
Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation Tactics
thehackernews.com
February 17, 2025 at 5:49 PM
Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation Tactics
New XCSSET v40 malware targets macOS developers via trojanized Xcode projects. The supply chain attack uses a sophisticated Chrome hijacking module to steal credentials and establish a fileless reverse shell. #XCSSET #macOS #malware #Xcode
🌐 cyber[.]netsecops[.]io
🌐 cyber[.]netsecops[.]io
New XCSSET Malware Variant Targets macOS Developers via Xcode
Unit 42 details the XCSSET v40 malware, a new variant targeting macOS developers through compromised Xcode projects on platforms like GitHub.
cyber.netsecops.io
August 1, 2026 at 2:26 AM
Einige Zeit war es ruhig um die Mac-Malware XCSSET. Nun hat Microsoft neue aktive Varianten entdeckt, die Xcode-Projekte befallen. #Security
XCSSET: macOS-Malware ist wieder aktiv
Einige Zeit war es ruhig um die Mac-Malware XCSSET. Nun hat Microsoft neue aktive Varianten entdeckt, die Xcode-Projekte befallen.
www.heise.de
February 18, 2025 at 10:45 AM
Einige Zeit war es ruhig um die Mac-Malware XCSSET. Nun hat Microsoft neue aktive Varianten entdeckt, die Xcode-Projekte befallen. #Security
XCSSET macOS malware returns with first new version since 2022
Data-stealing Mac malware XCSSET returns with fresh tricks
Known for popping zero-days of yesteryear, Microsoft puts Apple devs on high alert
buff.ly
February 18, 2025 at 5:42 AM
XCSSET macOS malware returns with first new version since 2022
🚨 Microsoft flags new XCSSET #macOS malware variant targeting developers.
⚠️ Steals Firefox data & credentials
⚠️ Hijacks clipboard to redirect crypto
⚠️ Malicious repos on GitHub already removed
Stay on guard, devs. 🛡️
#CyberSecurity #MacMalware #MicrosoftThreatIntel #XCSSET #InfoSec
⚠️ Steals Firefox data & credentials
⚠️ Hijacks clipboard to redirect crypto
⚠️ Malicious repos on GitHub already removed
Stay on guard, devs. 🛡️
#CyberSecurity #MacMalware #MicrosoftThreatIntel #XCSSET #InfoSec
September 26, 2025 at 6:20 PM
🚨 Microsoft flags new XCSSET #macOS malware variant targeting developers.
⚠️ Steals Firefox data & credentials
⚠️ Hijacks clipboard to redirect crypto
⚠️ Malicious repos on GitHub already removed
Stay on guard, devs. 🛡️
#CyberSecurity #MacMalware #MicrosoftThreatIntel #XCSSET #InfoSec
⚠️ Steals Firefox data & credentials
⚠️ Hijacks clipboard to redirect crypto
⚠️ Malicious repos on GitHub already removed
Stay on guard, devs. 🛡️
#CyberSecurity #MacMalware #MicrosoftThreatIntel #XCSSET #InfoSec
#XCSSETmalware
Article: https://www.bleepingcomputer.com/news/security/microsoft-spots-xcsset-macos-malware-variant-used-for-crypto-theft/
Article: https://www.bleepingcomputer.com/news/security/microsoft-spots-xcsset-macos-malware-variant-used-for-crypto-theft/
February 17, 2025 at 5:03 PM
Notícia da SecurityOnline
"Malware XCSSET Retorna com Capacidades Aprimoradas para Alvejar Usuários de macOS" #bolhasec
"Malware XCSSET Retorna com Capacidades Aprimoradas para Alvejar Usuários de macOS" #bolhasec
XCSSET Malware Returns with Enhanced Capabilities to Target macOS Users
Learn about the new variant of XCSSET malware targeting macOS users and its sophisticated infection strategies.
securityonline.info
April 17, 2025 at 11:30 PM
Notícia da SecurityOnline
"Malware XCSSET Retorna com Capacidades Aprimoradas para Alvejar Usuários de macOS" #bolhasec
"Malware XCSSET Retorna com Capacidades Aprimoradas para Alvejar Usuários de macOS" #bolhasec