Hack Forums
New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module (/showthread.php?tid=6310263)



New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module - Stanley - Oct 5, 2025

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module

Cybersecurity researchers have discovered an updated version of a known Apple macOS malware called XCSSET that has been observed in limited attacks.
"This new variant of XCSSET brings key changes related to browser targeting, clipboard hijacking, and persistence mechanisms," the Microsoft Threat Intelligence team said in a Thursday report.
"It employs sophisticated encryption and obfuscation

https://thehackernews.com/2025/09/new-macos-xcsset-variant-targets.html


RE: New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module - Vectura - Oct 5, 2025

Nasty update. Targeting Firefox with clipboard hijacking shows the malware’s still evolving fast — Mac users definitely shouldn’t get too comfortable.


RE: New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module - Aeowulf - Oct 5, 2025

Don't be copy/pasting password with MAC until you get this patched!


RE: New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module - Hackers - Oct 5, 2025

Quote:it's suspected that the propagation relies on the Xcode project files being shared among developers building apps for macOS.

This is definitely a major, major method across a lot of langs, programs, and repo networks.
Auto run for new clones / installs, and other build steps are a very easy way to target devs.


RE: New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module - Fish - Oct 6, 2025

This just highlights why everyone needs to constantly update their devices


RE: New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module - B3A - Oct 6, 2025

Don't store passwords anywhere is the tip for future .
We will be back on paper


RE: New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module - Lefty - Oct 6, 2025

Gee. They really are not having a good year this round haha


RE: New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module - DAL-SHA - Oct 6, 2025

That new XCSSET targeting Firefox with clipper tricks shows how malware keeps evolving .. watch your clipboard and keep security tight, even on Macs.


RE: New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module - ssnfekx - Oct 2, 2026

Eh

That might be nice


RE: New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module - octanitrocubane - Oct 2, 2026

Some password managers like keepasxc have feature that simulates typing in password. Does it save you from this?