New Mac OS Virus: A Growing Concern for Hong Kong Activists

In recent weeks, there have been reports of a new Mac OS virus targeting Hong Kong activists. The malicious code, which was discovered by Felix Aimé from SEKOIA.IO, uses a fake website to spread the exploit and compromise Mac users' devices.

The website in question, fightforhkcom, was registered on October 19th, 2021, but is no longer accessible. Its home page reads 'Liberate Hong Kong, the revolution of our times', suggesting that it may be linked to pro-democracy protests in Hong Kong. However, the true purpose of the website is far from revolutionary - it's designed to spread malware.

But how do victims come into contact with this malicious code? According to ESET researchers, who were investigating this campaign before its discovery, the exploit targets Safari users running on macOS. The compromise typically occurs when a user visits a compromised website, which then installs cyberespionage malware on their device.

One such website was a Hong Kong pro-democracy radio station, which was hacked to serve a Safari exploit that installed malware on site visitors' Macs. This is an example of a 'watering-hole attack', where an attacker compromises a legitimate website to spread malware to unsuspecting users.

The payload of this malware is a new family of macOS-targeted malware, which is designed to compromise the security of Hong Kong activists. The malware allows attackers to gain access to victims' devices and steal sensitive information.

Google TAG published a blog post on November 11th about watering-hole attacks leading to exploits for Safari web browser running on macOS, further highlighting the growing concern around this new Mac OS virus.

It's essential for users to take precautions to protect themselves from this malware. This includes keeping their operating system and software up-to-date, being cautious when visiting unfamiliar websites, and avoiding suspicious downloads. Additionally, users should use strong passwords, enable two-factor authentication, and regularly back up their data.

In conclusion, the new Mac OS virus targeting Hong Kong activists is a growing concern that requires immediate attention. Users must be vigilant in protecting themselves from this malware to prevent further compromise of their devices and personal information.

New mac os virus