XLoader MacOS Malware Variant Resurfaces

A macOS variant of the known XLoader malware has resurfaced, masking its information-stealing capabilities under the guise of an office productivity application called “OfficeNote,” researchers warn.

XLoader has been around since 2015 and a macOS version of the malware was first observed in 2021. This initial variant was distributed as a Java program, limiting the malware's spread because Java Runtime Environment hasn’t shipped on macOS by default for more than a decade.

However, the newest macOS variant of XLoader "has …

application called capabilities distributed information java macos macos malware malware masking office productivity program researchers stealing under version xloader xloader malware