Microsoft: New Variant of macOS Threat XCSSET Spotted in the Wild

Microsoft published analysis of an updated XCSSET macOS malware variant targeting Xcode developers: the variant adds stronger obfuscation, new persistence mechanisms (a ~/.zshrc_aliases method and a dock/Launchpad hijack via a signed dockutil), and multiple infection strategies that enable wormable supply-chain spread; it can exfiltrate data from Safari and apps (Skype, Telegram, WeChat, Notes), take screenshots, target digital wallets, and encrypt files, and defenders are advised to inspect downloaded Xcode projects and use Microsoft Defender for Endpoint.