Apple macOS users are the target of a new Rust-based backdoor that has been operating under the radar since November 2023.
The backdoor has been named RustDoor by Bitdefender, which impersonates an update to Microsoft Visual Studio and targets both Intel and Arm architectures.
The exact initial access path used to disseminate the implant is not currently known, although it is said to be distributed as FAT binaries containing Mac-O files.
Several variants of the malware with minor modifications have been detected to date, possibly indicating active development. The earliest sample of Rustdoor is dated November 2, 2023.
It comes with a wide range of commands that allow it to collect and upload files and obtain information about the compromised endpoint.
Some versions also include configuration with details on what data to collect, a list of targeted extensions and directories, and directories to exclude.
The captured information is then sent to a command-and-control (C2) server.
The Romanian cybersecurity firm said the malware is likely linked to major ransomware families such as BlackBasta and BlackCat due to overlap in C2 infrastructure.
“ALPHV/BlackCat is a ransomware family (also written in Rust) that first appeared in November 2021 and pioneered the public leak business model,” said security researcher Andrei Lapusneau.
In December 2023, the US government announced that it had removed the BlackCat ransomware operation and released a decryption tool that more than 500 affected victims could use to regain access to files locked by the malware.
11 comments
Thank you for the auspicious writeup It in fact was a amusement account it Look advanced to far added agreeable from you However how can we communicate
Usually I do not read article on blogs however I would like to say that this writeup very compelled me to take a look at and do so Your writing taste has been amazed me Thanks quite nice post
Somebody essentially lend a hand to make significantly articles Id state That is the very first time I frequented your website page and up to now I surprised with the research you made to make this actual submit amazing Wonderful task
I was suggested this web site by my cousin Im not sure whether this post is written by him as no one else know such detailed about my trouble You are incredible Thanks
I just could not depart your web site prior to suggesting that I really loved the usual info an individual supply in your visitors Is gonna be back regularly to check up on new posts
What i do not realize is in fact how you are no longer actually much more wellfavored than you might be right now Youre very intelligent You recognize thus considerably in relation to this topic made me in my view believe it from numerous numerous angles Its like men and women are not fascinated until it is one thing to do with Lady gaga Your own stuffs excellent All the time handle it up
you are in reality a good webmaster The website loading velocity is amazing It sort of feels that youre doing any distinctive trick Also The contents are masterwork you have done a fantastic job in this topic
I was recommended this website by my cousin I am not sure whether this post is written by him as nobody else know such detailed about my difficulty You are wonderful Thanks
I was recommended this website by my cousin I am not sure whether this post is written by him as nobody else know such detailed about my difficulty You are wonderful Thanks
certainly like your website but you need to take a look at the spelling on quite a few of your posts Many of them are rife with spelling problems and I find it very troublesome to inform the reality nevertheless I will definitely come back again
O que eu não entendi é que, na verdade, você não é muito mais inteligente do que seria agora. Você é muito inteligente. Você sabe muito sobre esse assunto e me fez acreditar nisso de vários ângulos diferentes. É como se mulheres e homens fossem não estou interessado, exceto que é uma coisa a realizar com Woman gaga Suas próprias coisas são excelentes Sempre cuide disso