Novel RustDoor macOS malware fueled by ransomware infrastructure

Three command-and-control servers previously linked to the ALPHV/BlackCat and Black Basta ransomware operations have been leveraged to support the novel Rust-based RustDoor backdoor, which spoofed Visual Studio to facilitate compromise file exfiltration on macOS devices since November, according to SecurityWeek.

alphv backdoor basta black basta black basta ransomware blackcat command compromise control devices exfiltration file infrastructure macos macos malware malware novel november operations ransomware rust rustdoor servers spoofed studio support visual studio