The latest version of XCSSET can also record a victim's screen—and even manipulate the Bitcoin addresses that appear in their browser.

Microsoft has observed a once formant macOS malware that has now began targeting Apple’s Xcode platform in a new, more enhanced variant. The Latest Tech News, Delivered to Your Inbox

Microsoft discovers new XCSSET macOS malware variant with enhanced obfuscation, persistence, and infection strategies.

Microsoft has discovered a new and more dangerous version of the XCSSET macOS malware circulating in the wild. Here are the details.

TA2726, per the enterprise security firm, acts as a TDS for TA2727 and another threat actor called TA569, which is responsible for the distribution of a JavaScript-based loader malware referred to as SocGholish (aka FakeUpdates) that often masquerades as a browser update on legitimate-but-compromised sites.

The updated malware, which spreads via infected Xcode projects, introduces advanced evasion tactics and persistence mechanisms to bypass security defenses.