New XCSSET variant targets macOS devs via compromised Xcode projects
BleepingComputer reports that a new variant of the XCSSET malware is targeting macOS developers via compromised Xcode projects. The attack involves tampering with Xcode projects, which are used by developers to build applications for Apple platforms. When a developer opens a compromised project, the malware can execute, potentially leading to further compromise. The report does not specify the exact distribution method or the payload's capabilities, but it highlights the risk to developers who rely on Xcode for their work. This is not the first time XCSSET has been observed, but this new variant indicates an ongoing threat to the macOS development community. The article does not provide details on mitigation or detection, focusing instead on the existence of this new variant and its attack vector.
Developers using Xcode face potential compromise from malicious projects, risking their systems and code.