Well this is new 🙃

Cross-posting @malwarezoo@bird.makeup

Modified versions of Termius (SSH client) were uploaded to VirusTotal. Contains a persistent downloader which fetches and decodes Khepri (an open-source post-exploitation tool).

/Applications/Termius.app/Contents/Fra... Helper .app/Contents/MacOS/.localized

Image Playground, "Describe an Image".

"Happy New Year"

Look what showed up in the mail today! #malware #macos #nostarchpress

Hold my beer

First #OBTS in the books. Had a great time and learned a bunch! Can't wait for next year!