A new information-stealing malware, called JaskaGO , targets Windows and MacOS systems
AT &T Alien Labs discovered the malware and said it is “equipped with an extensive set of commands from its command-and-control (C&C) server.”
Samples of the malware targeting macOS were first observed in July 2023, forging installers for legitimate software such as CapCut. Other variants of the malware have been disguised as AnyConnect and security.
See also: Malvertasing campaign spreads “PikaBot” malware!
Upon installation, the JaskaGO malware performs checks to determine if it is running in a virtual machine (VM) environment. If it detects this, it performs a harmless task to avoid detection of its malicious nature.
If not executed in a virtual machine environment, JaskaGO begins collecting information from the victim’s system and establishes a connection to its C&C for further instructions. For example, it can execute shell commands, affect running processes, and download additional malicious payloads. It is also capable of modifying the clipboard to facilitate theft cryptocurrency by replacing wallet addresses and harvesting files and data from web browsers.
Security researchers explain that on macOS, the JaskaGO malware can establish persistence and can operate with root privileges, disable protections , and create a custom launch daemon to automatically start at system startup.
See also: QakBot (QBot) malware is back – New phishing attack
Researchers have not yet identified the distribution method of the malicious software.
“JaskaGO contributes to a growing trend in malware development leveraging the Go programming language,” said one of the researchers.
“Go, also known as Golang, stands out for its simplicity, efficiency, and cross-platform capabilities. Its ease of use has made it an attractive choice for malware writers seeking to create flexible and sophisticated threats.“.
See also: GuLoader Malware: New techniques to avoid analysis
Protection of Windows and MacOS systems from malware
The first and most important step in protecting your Windows and macOS systems from malware is to install a reliable antivirus. This software should be able to detect and remove malware before it can cause damage to your system.
Additionally, it's important to keep your operating system and all applications your. Updates often include security fixes that can protect your system from new threats.
You should also be careful with the emails and websites you visit. Many times, malware can be installed on your system through dangerous attachments or links.
Finally, using strong passwords and two -factor authentication can help protect your system from malware attacks. These steps can make it more difficult for a hacker to gain access to your system.
Source: thehackernews.com
