Unfortunately, the malware is novel and avoided Apple’s protection mechanisms, but Wardle believes that Apple will have a patch to change the way macOS scans files downloaded by applications rather than the user.Ģ/ We walked back the entire attack, recovered and reported the 0-day to firefox, pulled apart the malware and infra used in the attack and are working with various orgs to continue burning down attacker infrastructure and digging into the attacker involved. The hash provided by Wardle matches one from Martin, and the victim of the attack was involved with a cryptocurrency exchange until very recently. Meanwhile, Apple security expert Patrick Wardle published an analysis of malware that appears to have installed itself on a fully updated Mac.
for me on my Mac Desktop and Windows 10 laptop after upgrading to Firefox 43. Martin also notes that other exchanges were targeted in the attacks, although none have stepped forward. Firefox disable 1password, I uninstalled and tried to reinstall but I keep. Now, Coinbase’s head of security Philip Martin says the attack was aimed at Coinbase employees and not users. At the time, we only knew the attacks had something to do with Coinbase as the initial bug report came from a researcher who works on both Google’s Project Zero and the Coinbase security team. Before either of those patches rolled out, Mozilla became aware of an attack leveraging both vulnerabilities.
