TLDR InfoSec · MISCELLANEOUS

NEW MACOS BACKDOOR WRITTEN IN RUST SHOWS POSSIBLE LINK WITH WINDOWS RANSOMWARE GROUP

bitdefender.com6 min read

Summary from the TLDR InfoSec newsletter

RustDoor is a new backdoor that has been targeting Apple macOS since November 2023, masquerading as a Visual Studio update. It has Intel and Arm versions and unknown initial access. RustDoor is being actively developed. It can gather/upload files and system info to its C2 server.