TF-MAL-osx.mami

Description

ThreatFox malware family `osx.mami`. Printable name: MaMi.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Catch'em all: Classification of Rare, Prominent, and Novel Malware Families
  web:arxiv.org

  The goal of malware family classification is to assign malware family labels to known- malware examples to better understand specimen be-havior [2]. Malware authors actively generate new specimens to evade detection and to introduce novel threats, resulting in variations within existing malware families or evolution of new/novel families.

  2026-05-22 05:29 UTC
• Mirai Malware in 2025: Variant Behavior, Exploit Chains, and Mitigation ...
  web:echoxec.com

  Mirai Malware in 2025: Variant Behavior, Exploit Chains, and Mitigation Insights This post explores the latest Mirai botnet variants actively exploiting critical vulnerabilities in Samsung MagicINFO, DVR devices, and Wazuh servers. It highlights key behaviors observed through sandbox analysis, exploitation techniques, and provides actionable recommendations to defend against these evolving ...

  2026-05-22 05:29 UTC
• Mami - macOS Malware Encyclopedia
  web:macos.checkpoint.com

  OSX/ MaMi is a DNS hijacking malware with additional dangerous functionalities in its code, such as taking Screenshots, simulating mouse events, downloading & uploading files, executing additional commands and more.The malware modifies the system's default DNS setting, so all the DNS requests will be sent to the attacker machines, which can use it to send wrong DNS response. In this way an ...

  2026-05-22 05:29 UTC
• Malware Families - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  This page gives an overview of all malware families that are covered on Malpedia, supplemented with some basic information for each family .

  2026-05-22 05:29 UTC
• RESURGE Malware and CVE-2025-0282: Critical Threats and Defender ...
  web:windowsforum.com

  The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .

  2026-05-22 05:29 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-05-22 05:29 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-05-22 05:29 UTC
• MaMi macOS Malware: What You Need to Know - Ensono
  web:www.ensono.com

  New macOS malware was recently discovered "in the wild." Named MaMi , this unsophisticated malware can seize DNS settings, with address changes 82.163.143.172 and 82.163.142.174 remaining persistent - even after removing these entries. Mami can also execute code, download/upload files, persist as a launch item, generate simulated mouse events, and screenshot capture any infected Macs ...

  2026-05-22 05:29 UTC
• PDF Increase in Malware Enabled ATM Jackpotting Incidents Across United States
  web:www.ic3.gov

  Overview Threat actors are deploying ATM jackpotting malware , including the Ploutus family malware , to infect ATMs and force them to dispense cash. Ploutus malware exploits the eXtensions for Financial Services (XFS), the layer of software that instructs an ATM what to physically do. When a legitimate transaction occurs, the ATM application sends instructions through XFS for bank authorization ...

  2026-05-22 05:29 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection

  2026-05-22 05:29 UTC

Only Available for Registered Users. Sign in to view.