North Korean hackers deploy new macOS malware that tricks AI security tools

The ultimate resources for professionals working on North Korea

Data-stealing malware uses novel techniques to undermine automated analysis workflows used by cybersecurity teams

North Korean-linked cybercriminals are using a newly identified malware family targeting Apple computers, which combines traditional data-stealing capabilities with a novel attempt to manipulate security tools powered by artificial intelligence (AI), according to cybersecurity researchers.

In a report published Tuesday, U.S. cybersecurity firm SentinelLabs outlined the workings of the “macOS.Gaslight” malware, which is designed to infiltrate macOS devices, steal sensitive information and provide remote access to operators.

SentinelLabs assessed with “high confidence” that the malware is linked to DPRK-aligned activity targeting macOS users, noting that Apple’s built-in XProtect security system flags the

© Korea Risk Group. All rights reserved. No part of this content may be reproduced, distributed, or used for commercial purposes without prior written permission from Korea Risk Group.