Cyber security researchers have uncovered FrigidStealer, a new macOS malware spread through fake browser updates. This malware is part of a broader campaign by the TA2727 group, also known for distributing malware on Windows and Android.

Key takeaways:

❄️ FrigidStealer Introduction: A new malware targeting macOS, exploiting fake browser update prompts.

🖥️ Attack Method: Uses web injects to redirect users to download pages, where they're tricked into installing the malware.

🔍 Threat Actor: Linked to TA2727, a group that targets Windows with Lumma Stealer and Android with Marcher.

🔓 Security Bypass: The malware requires manual launch to bypass macOS Gatekeeper, after which it steals sensitive data.

🚨 User Caution: macOS users should be wary of unexpected update notifications and only download from official sources.

🔗 https://buff.ly/3EKFYGY

• iocs.txt: List of all Indicators of Compromise (IOCs) in the article.
• endpoint-iocs.txt: List of endpoint IOCs in the article.
• network-iocs.txt: List of network IOCs in the article.