TF-MAL-osx.creative_updater
📛 Threat Title
Malware family: CreativeUpdater
Description
ThreatFox malware family `osx.creative_updater`. Printable name: CreativeUpdater.
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:macos.checkpoint.com
CreativeUpdate is a malware that downloads and executes a crypto miner. The malware was found within a modified package of legitimate applications such as Firefox.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the CreativeUpdater malware family including references, samples and yara signatures.
-
web:notepad-plus-plus.org
All remediation and security hardening was completed by the provider by December 2, 2025, successfully blocking further attacker activity. Note on timelines: The security expert's analysis indicates the attack ceased on November 10, 2025, while the hosting provider's statement shows potential attacker access until December 2, 2025.
-
web:thehackernews.com
TamperedChef malware spread via fake PDF editors from June 26 to August 21, stealing credentials and cookies.
-
web:www.bleepingcomputer.com
Threat actors have been using multiple websites promoted through Google ads to distribute a convincing PDF editing app that delivers an info-stealing malware called TamperedChef.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.csoonline.com
The latest tactics of this campaign include steganography — hiding malware in the pixels of an image — and a "highly convincing" fake Windows Update screen that asks the user to open a Run ...
-
web:www.malwarebytes.com
Malwarebytes for Mac detects and removes OSX.CreativeUpdate Remediation Malwarebytes for Mac will detect and remove the components of this malware . Download and install the latest version of Malwarebytes for Mac. Click the "Scan Now" button to perform a system scan. If threats are detected during the scan, a count of detected threats is ...
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
-
web:www.rescana.com
A critical security incident affecting the Notepad++ text editor was identified between June and December 2025, in which the official update mechanism was hijacked to deliver malware to select users.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.