Google’s Threat Analysis Group discovered a new macOS implant that security researcher Patrick Wardle dubbed OSX.CDDS. It targets « visitors to Hong Kong websites for a media outlet and a prominent pro-democracy labor and political group. »
Notable features for this backdoor include: victim device fingerprinting, screen capture, file download/upload, executing terminal commands, audio recording, keylogging.
Check It Out: Newly Discovered ‘OSX.CDDS’ Implant Targets Visitors to Hong Kong Websites
Discussion