MacOS Targeted by New Backdoor Linked to ALPHV Ransomware

Bitdefender researchers have identified Trojan.MAC.RustDoor, a Rust-written macOS backdoor that impersonates a Visual Studio Code update to collect files (Desktop, Documents, user notes), compress them into a ZIP, and exfiltrate them to C2 servers. Multiple variants have been active for at least three months; artifacts and three of four C2s overlap with prior ransomware campaigns, suggesting a possible operational link to the ALPHV/BlackCat ransomware group, though attribution remains unconfirmed.