Microsoft spots XCSSET macOS malware variant used for crypto theft

Microsoft warns of a new XCSSET macOS malware variant observed in limited attacks that steals digital wallets, Notes app data, credentials and other sensitive information by infecting Xcode projects; this variant adds stronger code obfuscation, new persistence techniques (~/.zshrc_aliases and a dock-based Launchpad hijack using a signed dockutil), and novel payload placement in Xcode build settings, increasing supply-chain risk for developers. Microsoft recommends inspecting and verifying Xcode projects and codebases from unofficial repositories to mitigate infection.