Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
macOS.Gaslight Rust Backdoor Uses Prompt Injection to Mislead AI Malware Analysts
Excerpt
A new macOS malware family, dubbed macOS.Gaslight has emerged with a novel evasion technique designed specifically to target artificial intelligence. Discovered in early June after an Apple XProtect update , this Rust-based backdoor uses embedded prompt injection to deceive LLM-assisted malware analysis tools. While static engines on VirusTotal initially missed the ad hoc signed binary, researchers associate this implant with the DPRK-aligned BONZAI signature family. A…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 77b4fd46994992f0e57302cfe76ed23c0d90101381d2b89fc2ddf5c4536e77ca | Medium | Score 55/100 | First seen |
| SHA256 | 6328567511d88fdc2ae0939c5ef17b7a63d2a833881900de018a4f12f4982525 | Medium | Score 55/100 | First seen |
IOC Relationship Graph
Building graph…