Patched Mac malware sheds light on scary backdoor for hackers

Apple has patched the DazzleSpy exploit in macOS, but the threat is real.

- ROMAN LOYOLA

Researchers at security firm Eset (fave.co/3gMjCp2) have provided details (fave.co/3Jw4zMN) on brand-new macOS malware that can be used to perform surveillance on a Mac. “DazzleSpy” is malware that may have infected users who visited a website that promoted democracy in Hong Kong.

DazzleSpy is what security researchers call a watering hole attack, where a website infects visitors to that site. It is used when an attacker wants to target a specific group. Dazzle Spy is documented with the ID of CVE-2021-30869 (fave.co/3HWUQUC) in the Common Vulnerabilities and Exposures database, and was patched by Apple in Catalina and Big Sur updates in September.

The Google Threat Analysis Group reported on the technical aspects of these watering hole attacks last November (fave.co/3HR3leD). Eset's recent report provided details on the exploit and how Mac users come into contact with DazzleSpy.