Hackers Use Trojanized macOS Apps to Spread Evasive Cryptocurrency Mining Malware

Hackers have been using Trojanized macOS apps to distribute evasive cryptocurrency mining malware, according to a report by cybersecurity firm, Trend Micro. The malware, named "OSX.OCEANLOTUS," has been designed to evade detection by security solutions and steal computing resources to mine Monero cryptocurrency. The malware is being distributed via pirated macOS software, such as Adobe Premiere Pro and Microsoft Office for Mac, which have been modified to include the malware. The modified software is then distributed via various file-sharing websites, disguised as legitimate software. Once the infected software is installed, the malware downloads additional components and establishes communication with a command-and-control server to receive instructions. It then begins mining Monero cryptocurrency in the background, using the infected computer's processing power and energy resources. Trend Micro's research suggests that the malware is being used by a group of hackers known as "OceanLotus," who have been previously linked to cyber espionage activities targeting organizations in Southeast Asia. The incident highlights the ongoing threat of cryptocurrency mining malware, as well as the risks associated with downloading and using pirated software. To protect against such threats, users are advised to only download software from trusted sources and to keep their security solutions up to date.