Odaily News Researchers at Microsoft Threat Intelligence, a Microsoft subsidiary, have discovered a new type of malware that can target crypto wallets. XCSSET was first discovered in 2020, allowing malicious actors to take screenshots, record user behavior, and steal data from Telegram. Updated versions can also locate data in the Apple Notes app and use obfuscation technology to make malware more difficult to detect. XCSSET also theoretically has the ability to manipulate what end users see on their browsers. This could include modifying or replacing Bitcoin and other cryptocurrency addresses, meaning that funds are not sent to their desired destinations.
The researchers added that users must always check and verify any Xcode projects downloaded or cloned from repositories, as malware is often spread through infected projects. They should also only install apps from trusted sources, such as the software platform's official app store. (Decrypt)