Threat Intelligence: New LamePyre Mac Malware

LamePyre is a recently identified macOS malware that poses as Discord but is actually a rudimentary shell which decodes a payload, captures screenshots, and sends them to a C2 server. It persists using a launch agent named com.apple.systemkeeper.plist; researchers note it is poorly disguised and currently of limited capability, but users should be cautious about downloaded apps and permissions since the malware could be extended.