[Stanley]

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module

Cybersecurity researchers have discovered an updated version of a known Apple macOS malware called XCSSET that has been observed in limited attacks.
"This new variant of XCSSET brings key changes related to browser targeting, clipboard hijacking, and persistence mechanisms," the Microsoft Threat Intelligence team said in a Thursday report.
"It employs sophisticated encryption and obfuscation

https://thehackernews.com/2025/09/new-ma...rgets.html

[Vectura]

Nasty update. Targeting Firefox with clipboard hijacking shows the malware’s still evolving fast — Mac users definitely shouldn’t get too comfortable.

[Aeowulf]

Don't be copy/pasting password with MAC until you get this patched!

[Hackers]

it's suspected that the propagation relies on the Xcode project files being shared among developers building apps for macOS.

This is definitely a major, major method across a lot of langs, programs, and repo networks.
Auto run for new clones / installs, and other build steps are a very easy way to target devs.

[Fish]

This just highlights why everyone needs to constantly update their devices

[B3A]

Don't store passwords anywhere is the tip for future .
We will be back on paper

[Lefty]

Gee. They really are not having a good year this round haha

[DAL-SHA]

That new XCSSET targeting Firefox with clipper tricks shows how malware keeps evolving .. watch your clipboard and keep security tight, even on Macs.

[ssnfekx]

Eh

That might be nice

[octanitrocubane]

Some password managers like keepasxc have feature that simulates typing in password. Does it save you from this?