Apple’s Malware Whack-a-Mole: Ferret Family Sneaks Past XProtect Again!
Apple updates XProtect to block macOS Ferret malware, part of North Korea’s “Contagious Interview” campaign. This sneaky scheme involves fake job interviews, malicious scripts, and even a phony Chrome update. Meanwhile, SentinelOne warns of “FlexibleFerret” slipping through the cracks. Looks like malware is getting a bit too comfortable on macOS!

Hot Take:
Looks like North Korean hackers are interviewing for the role of ‘most persistent cyber pests’ with their latest malware campaign. Apple’s got the XProtect baton, but these ferret-themed threats are proving to be quite the sly candidates!
Key Points:
- Apple has updated XProtect to counteract the macOS Ferret family malware.
- The malware campaign, dubbed “Contagious Interview,” originates from North Korea.
- Threat actors lure targets through fake job interviews to install malware.
- Newly detected samples, “FlexibleFerret,” are evading current XProtect defenses.
- The malware targets sensitive data, focusing on web browsers and crypto wallets.
Already a member? Log in here