SwiftBelt

SwiftBelt 概要 SwiftBelt は、@harmjoy 氏の Windows ベースの列挙ツール Seatbelt に触発された macOS 列挙ツールです。SwiftBelt はコマンドラインユーティリティを一切使用せず、Swift コード（Cocoa Framework、Foundation ライブラリ、OSKit ライブラリなどを活用）を使用してシステム列挙を行います。攻撃側の観点で、macOS ホストへのアクセスを取得した後に列挙を実行するために利用できます。私は意図的に、ポップアップを引き起こす機能（例：キーチェーン列挙）を含めていません。 各種 Objective...

Japanese Cryptocurrency Exchange Falls Victim to JokerSpy macOS Backdoor Attack

An unknown cryptocurrency exchange located in Japan was the target of a new attack earlier this month to deploy an Apple macOS backdoor called JokerSpy. Elastic Security Labs, which is monitoring the intrusion set under the name REF9134 , said the attack led to the installation of Swiftbelt, a...

Japanese Cryptocurrency Exchange Falls Victim to JokerSpy macOS Backdoor Attack

An unknown cryptocurrency exchange located in Japan was the target of a new attack earlier this month to deploy an Apple macOS backdoor called JokerSpy. Elastic Security Labs, which is monitoring the intrusion set under the name REF9134, said the attack led to the installation of Swiftbelt, a...