TF-MAL-osx.evilosx
📛 Threat Title
Malware family: EvilOSX
Description
ThreatFox malware family `osx.evilosx`. Printable name: EvilOSX.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
osx.evilosx
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/osx.evilosx
IOC database
- Type
- domain
- Value
osx.evilosx- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-osx.evilosx
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/osx.evilosx
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:docs.sophos.com
This page explains the names we use for malicious behavior detected on computers or servers.
-
web:github.com
An evil RAT (Remote Administration Tool) for macOS / OS X. - Marten4n6/ EvilOSX
-
web:macos.checkpoint.com
EvilOSX is written in Python, and according to the developer the motivation behind it was that it will be used in "Rubber Ducky". A USB mostly used by hackers to inject keystrokes to a computer is connected and with that bypasses the need to enter credentials on the login screen.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the EvilOSX malware family including references, samples and yara signatures.
-
web:medium.com
Introduction EvilOSX is a pure python, post-exploitation, RAT (Remote Administration Tool) for macOS / OSX. Features of EvilOSX : Emulate a simple terminal instance This means we can input commands ...
-
web:opensecatlas.com
EvilOSX is a powerful Remote Administration Tool (RAT) designed for macOS that enables extensive control and monitoring of target systems. An evil RAT (Remote Administration Tool) for macOS / OS X.
-
web:www.activecountermeasures.com
What is Malware of the Day? Lab Setup Malware : EvilOSX MITRE Tactics: TA0011 Command and Control, T1219 Remote Access Software Traffic Type: […]
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.intego.com
The past several weeks have brought to light three distinct families of RAT malware for Macs. We've previously covered CrossRAT and EvilOSX , and in this article... By Joshua Long Malware New EvilOSX Malware Spotlights Risk of Poor Password Hygiene Around the same time OSX/Dok was discovered last year, a remote access tool (RAT) for macOS and ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.