DPRK's FlexibleFerret Tightens macOS Grip

The article discusses the ongoing cyber threat posed by North Korea-linked malware known as FlexibleFerret, which targets macOS users through social engineering tactics, particularly fake job recruitment schemes. The malware has evolved, utilizing more sophisticated methods to trick users into executing malicious commands via Terminal. Recent updates include a shell-loader with architecture-aware logic and a Go-based backdoor that enhances data exfiltration capabilities.

The campaign employs convincing recruitment-themed web pages to lure victims, ultimately leading them to bypass macOS security protections. Organizations are advised to treat unsolicited job assessments and Terminal commands as high risk.