New malware targets Intel Macs and business data

A new form of malware is making its rounds on the Internet, stealing business data from Intel-based Mac computers.

Hackers are allegedly using a malware called “MetaStealer” and passing it off as a legitimate app installer. Researchers explain how “MetaStealer” works and its primary mode of action. According to SentinelOne’s Phil Stokes, attackers are specifically hacking into companies that use macOS by posing as fake clients.

Users are forced to install the malware through social engineering. Examples show that the image file contains a payload that provides hackers with a list of names of interested companies. A single executable file is not enough to hack the computer as victims still need to override OCSP and Gatekeeper.

Business and Mac computer owners are advised not to open suspicious emails or files. Apple has responded to the malware by releasing update X2170 for XProtect to detect MetaStealer signatures and block the threat.