The Mac App Store provides the safest place to get software for the Mac. However, it is important to highlight that this malware family isn't able to bypass Gatekeeper protections, and hence it does not constitute an unchained threat to macOS users.
This includes specific variants cited in JAMF's report. Update 2/24 - An Apple spokesperson told BleepingComputer that this particular malware is on their radar, and they work on targeted XProtect updates to effectively block it. In conclusion, the recommendation is to avoid downloading pirated software from peer-to-peer networks, as these are almost always ridden with malware or adware. However, this only prevented the legitimate application from running, not the cryptocurrency miner, so Apple’s new security system still has some way to go to protect the user effectively. However, Ventura still invalidated it because it detected a modification in the software content.
In this case, the pirates modified Final Cut Pro only partially, keeping the original code-signing certificate intact. The latest version of macOS, codenamed “Ventura,” introduces more stringent code-signing checks that threaten to make hiding and launching malware from inside user-launched apps, especially pirated ones, ineffective. Anti-Activity Monitor script (Jamf) Ventura and the road ahead
0 kommentar(er)
