Unix and macOS malware

Research

Linux.Lupper reports

We are receiving an increasing number of infection reports by Linux.Lupper, a Linux worm which spreads using a vulnerability in ‘xmlrpc.php’, a popular script found on various Linux distributions.

Reports

ToddyCat: your hidden email assistant. Part 2

An in-depth analysis of Umbrij, a new tool used by the ToddyCat APT group to compromise corporate email communications in Gmail. The attack targeted OAuth authorization tokens, allowing threat actors to gain access to Google services.