News for hackers. Stuff that matters.
Re:Porting Firefox to Apple Silicon by sjg007 on Wednesday January 20, 2021 @01:01PM (#25849618)
I mean there is mac malware and some of it is quite sophisticated. The compiled apple script bitcoin miner being one of the more ingenious ones. But those were distributed through pirated applications. There are probably a few zero days as well that maybe an AVE package could help stop if a signature is rapidly distributed. Ignoring the fact that the AV engine itself is a target too.

Most people using only the app store helps cut that down.

Re:Porting Firefox to Apple Silicon by wlesieutre on Wednesday January 20, 2021 @01:13PM (#25849792)
The one in recent memory for me is the KeRanger ransomware that was distributed in the official Transmission installer.

https://unit42.paloaltonetworks.com/new-os-x-ransomware-kera...

>Transmission representative John Clay told Reuters via email that the ransomware was added to disk-image of its software after the project's server was compromised in a cyber attack.

>"We're not commenting on the avenue of attack, other than to say that it was our main server that was compromised," he said. "The normal disk image (was) replaced by the compromised one."

Re:Porting Firefox to Apple Silicon by setpatchaddress on Wednesday January 20, 2021 @02:11PM (#25850574)
Just to answer the original question: that's an example of something Apple handled -- no external AV required.
Re:Porting Firefox to Apple Silicon by wlesieutre on Wednesday January 20, 2021 @02:23PM (#25850728)
Yes, although it snuck by Gatekeeper to begin with by being signed by another developer account.

Would make it past Apple's new notarization scheme these days?