Low-detection macOS malware used in job / interview-themed phishing. We recently observed a subm...

Summary

Security researchers identified a malicious DMG file masquerading as WebEx with minimal VirusTotal detection (3/62 engines) being distributed through job and interview-themed phishing campaigns targeting macOS users. The malware demonstrates evasion techniques typical of sophisticated social engineering attacks exploiting job seeker interest. The discovery highlights the ongoing threat of low-detection Mac malware leveraging employment-related pretexts.

Indicators of Compromise

• hash_sha256 — 5fc61384dd6f15e6bb510e0421000c1301a40d7acf05cedbeb6bc789c0a99d00
• malware — WebEx.dmg

Entities