If a developer’s Mac is infected with XCSSET, the infection can spread to any Mac app the developer creates-which in a sense can make the developer an unknowing distributor of XCSSET malware.

While it is not entirely clear why developers are being targeted, one plausible theory is that it may be an attempt at wider distribution of the malware. An Xcode project infected by XCSSET can lead to malicious code being executed on a developer’s computer. One of the most interesting things about XCSSET is that its main target seems to be developers who use Apple’s Xcode app. “XCSSET” (which Intego VirusBarrier detects as OSX/XCSSET.A) is recently discovered Mac malware with a variety of capabilities and some unique traits. What does XCSSET malware do? How is it unique? This means that you don’t necessarily have to be a developer-and you don’t need to have Xcode installed-to get infected. However, it’s important to note that XCSSET can also spread via maliciously modified apps.

If an XCSSET-infected Xcode project is opened and built, malicious code will run on the developer’s Mac. The primary method of infection is user-downloaded Xcode projects. How can Mac users avoid getting infected with XCSSET?.Apple knew about XCSSET, but did not coordinate with the antivirus industry.How long has XCSSET been in the wild? How many victims are there?.Which vulnerabilities does XCSSET exploit, and what are the implications?.What does XCSSET malware do? How is it unique?.Let’s explore everything you need to know about the latest Mac malware threat. Among them, it can exploit zero-day vulnerabilities, hijack browsers, steal passwords, take screenshots, and exfiltrate data. This unique malware, which seems to primarily target app developers (but can infect any Mac user), has a wide range of abilities. Over the past two weeks, Intego has been actively investigating XCSSET (aka MACOS.2070d41) - an intriguing new Mac malware specimen. Malware Mac malware exposed: XCSSET, an advanced new threat

Mac adware cleaner real app