Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

macOS.Gaslight Rust Backdoor Uses Prompt Injection to Mislead AI Malware Analysts

Cyber Press
Cyber Press
Published June 25, 2026Original Report

Excerpt

A new macOS malware family, dubbed macOS.Gaslight has emerged with a novel evasion technique designed specifically to target artificial intelligence. Discovered in early June after an Apple XProtect update , this Rust-based backdoor uses embedded prompt injection to deceive LLM-assisted malware analysis tools. While static engines on VirusTotal initially missed the ad hoc signed binary, researchers associate this implant with the DPRK-aligned BONZAI signature family. A…

Read the original report →

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA25677b4fd46994992f0e57302cfe76ed23c0d90101381d2b89fc2ddf5c4536e77caMediumScore 55/100First seen
SHA2566328567511d88fdc2ae0939c5ef17b7a63d2a833881900de018a4f12f4982525MediumScore 55/100First seen

IOC Relationship Graph

Building graph…