macOS Backdoor Uses Prompt Injection to Evade AI Triage

SentinelLabs uncovered macOS.Gaslight, a North Korea‑linked Rust backdoor and infostealer that harvests browser data, terminal histories, installed apps and the macOS login keychain. Uniquely, the sample embeds 38 fabricated Markdown-fenced system messages designed as a prompt injection to derail AI-assisted triage tools; it uses Telegram Bot API with certificate pinning for C2, can stage a Python interpreter at runtime, and scrubs its bot token to hinder detection.