Microsoft warns of new XCSSET macOS malware variant targeting Xcode devs

Microsoft reports a new XCSSET macOS malware variant that infects Xcode projects to steal Notes, browser data (including Firefox via a modified HackBrowserData), and cryptocurrency by hijacking clipboard addresses; the variant also adds new persistence mechanisms (LaunchDaemon entries and a fake System Settings.app) and has been observed in limited attacks while researchers coordinate with Apple and GitHub to mitigate it.