Fake Wallpaper App, YouTube Channel Used to Spread notnullOSX Malware
ID: 8a8a36bd-f3ae-5a53-9a93-25d8c34cae64
STIX ID: report--8a8a36bd-f3ae-5a53-9a93-25d8c34cae64
Feed Name: GBHackers
Threat Score
A targeted campaign distributes notnullOSX — a modular Go-based macOS infostealer — via fake wallpaper installers and a hijacked YouTube channel; attackers socially engineer users to grant Full Disk Access, then exfiltrate cryptocurrency wallets, credentials, and other sensitive data, with operator ties to alias “alh1mik” and multiple IOCs and delivery domains provided.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.