Malware targeting Apple Mac systems signed with an official developer ID has emerged, and is thought to have been sponsored by a nation state.
PDFs offering “recent news”, and the decoy files actually seen by targets contain rhetoric against Kazakhstan president Nursultan Nazarbayev.
This is only the second known case of Mac malware signed with an Apple Developer ID, Sean Sullivan, F-Secure security advisor, told TechWeekEurope.
“As both of these cases appear to be targeted attacks against activists, it is also likely that they’re government sponsored – and so faking the needed identity info may not be such a difficult task,” Sullivan added.
