#mac · 8sync News

macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox

SentinelLABS has analyzed macOS.Gaslight, a DPRK-linked Rust macOS implant with a novel anti-analysis technique: a 3.5 KB embedded prompt-injection payload containing 38 fabricated 'system' messages designed to mislead LLM-assisted triage pipelines into aborting analysis. Beyond this, the implant features a Telegram Bot API C2 with AES-GCM encryption and certificate pinning, a bot-token self-redaction mechanism, a Python-based credential stealer (harvesting browser data, keychains, and terminal history), LaunchAgent persistence masquerading as an Apple system service, and a runtime-fetched standalone CPython interpreter. The prompt injection is more sophisticated than previously documented examples, using a 38-message harness-spoofing cascade rather than a single injected block. Defenders building LLM-assisted analysis pipelines are warned to treat sample contents as adversarial input.

Taking Control of Toolbar Items in SwiftUI

SwiftUI introduces several new Toolbar APIs giving developers finer control over toolbar item visibility and behavior across platforms. Key additions include the visibilityPriority modifier for ToolbarContent (with automatic, low, and high options), the ToolbarOverflowMenu type for explicitly collapsing groups of items, the topBarPinnedTrailing placement to keep items pinned to the top bar trailing edge, and the toolbarMinimizeBehavior modifier to minimize navigation, tab, bottom, or window bars on scroll. These APIs help balance SwiftUI's adaptive behavior with explicit developer control across iOS, iPadOS, and macOS.

New macOS ClickFix attack silently mounts DMGs to push infostealer

A new macOS ClickFix campaign uses fake CAPTCHA pages to trick users into running Terminal commands that silently download, mount, and execute malicious DMG files. The payload is the Atomic macOS Stealer (AMOS), which harvests browser credentials, cryptocurrency wallet data, Apple Keychain files, messaging app data, and user documents. Unlike previous DMG-based attacks requiring manual user interaction, this campaign automates the entire infection chain via hdiutil and the macOS open command. The malware targets over a dozen Chromium and Firefox-based browsers, multiple crypto wallets, and even replaces legitimate Ledger Live and Trezor Suite installations with malicious versions. All stolen data is zipped and exfiltrated to attacker-controlled servers.