SpectralBlur: New macOS Backdoor Threat from North Korean Hackers

**SpectralBlur** is a newly reported macOS backdoor that shares functionality with KANDYKORN and appears linked to North Korean threat actors (TA444/Lazarus). It supports file upload/download, remote shell via a pseudo-terminal (grantpt), configuration updates, and anti-analysis techniques; researchers (Lesnewich, Wardle) observed a VirusTotal sample and note increasing macOS malware targeting high-value crypto and blockchain organizations.