TF-MAL-osx.pureland
📛 Threat Title
Malware family: Pureland
Description
ThreatFox malware family `osx.pureland`. Printable name: Pureland.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
osx.pureland
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/osx.pureland
IOC database
- Type
- domain
- Value
osx.pureland- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-osx.pureland
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/osx.pureland
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:malpedia.caad.fkie.fraunhofer.de
According to SentinelOne, this is an infostealer, targeting among other things the encrypted database of Zoom.
-
web:polaryse.github.io
Analysis of an information stealer application designed for MacOS systems alongside a detailed breakdown of the structure of iOS applications to aid in future analysis of mac malware .
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.broadcom.com
PureLand is an infostealer variant targeting the macOS platform. The malware was initially discovered in early 2023 and seen being distributed alongside of Redline Stealer variant targeting Windows machines.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.microsoft.com
Take these steps to help prevent malware infection on your computer. Guidance for enterprise administrators and Microsoft 365 Defender customers Ransomware more than often attacks enterprises than individuals. Following the below mitigation stepTake these steps to help prevent malware infection on your computers can help prevent ransomware attacks.
-
web:www.ncsc.gov.uk
This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection
-
web:www.researchgate.net
Abstract and Figures The Pure malware family , comprising components like PureCrypter, PureLogs, and PureMiner, represents a sophisticated and growing threat to global cybersecurity.
-
web:www.semanticscholar.org
This study delves into the Pure malware's technical intricacies, its track record, and its alignment with frameworks like MITRE ATT&CK, CAPEC, and Palo Alto Unit 42, and proposes AI-powered mitigation strategies, digital forensics methodologies, reverse engineering practices, and proactive organizational policies to counteract such threats. The Pure malware family , comprising components like ...
-
web:www.sentinelone.com
This year has seen an explosion of infostealers targeting the macOS platform. Throughout 2023, we have observed a number of new infostealer families including MacStealer, Pureland , Atomic Stealer and RealStealer (aka Realst). Over the last few months, we have also been tracking a family of macOS infostealers we call 'MetaStealer'. Last week, Apple dropped a new signature for XProtect that ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.