Veille cybersecurite : PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
Source : The Hacker News
Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain.
The latest artifacts, per Jamf Threat Labs, continue to rely on the same JavaScript for Automation (JXA) dropper mechanism, but modify the lure and the delivery method.
« Where earlier variants embedded their payload key material
Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.