A new malware family named Ferret has been identified by researchers at SentinelLabs, posing a significant threat to MacBook users. This malware is linked to North Korean hackers and cybercriminal groups. Ferret is an evolution of previous malware variants and disguises itself as a legitimate Google Chrome update file. By mimicking legitimate Chrome code, Ferret is able to bypass security applications and scanning systems.The malware enters a MacBook when the user is deceived into downloading it, typically through fake job interviews or other online interactions. During these interactions, the user is tricked into downloading a piece of code, such as a “Chrome update” or “Zoom update.” Once installed, Ferret gains access to the system, collecting and stealing sensitive data in the background.
 

Apple has reportedly acknowledged the threat posed by Ferret, and MacBooks are equipped with XProtect, a security feature designed to counter such threats. XProtect has recently been updated to address Ferret, so if your MacBook has not been updated in a while, now would be a good time to do so.Ferret malware was first detected in December as part of the North Korean Contagious Interview campaign. In this campaign, cybercriminals lure individuals by pretending to be conducting job interviews and tricking them into installing the malware.
 

How Does Ferret Malware Affect MacOS Systems?

Once installed, Ferret malware performs several malicious activities:

1. Disguises itself as legitimate software: Ferret uses a harmful shell script to install persistent programs that appear as Google Chrome updates or Zoom-related services. These agents ensure the malware runs each time the system starts.
2. Data theft: While running in the system, Ferret gathers sensitive data and sends it out using Dropbox, a cloud storage service.

How to Stay Safe from Malware:

Ferret is just one of many types of malicious software, but its method of attack—deceiving users into installing it—remains common across most malware threats. To stay safe, always avoid clicking on unknown links or downloading software from untrusted sources. Be especially cautious when someone asks you to download something during job interviews or while troubleshooting IT problems.It’s crucial for MacBook users to remain vigilant and keep their systems updated to reduce the risk of falling victim to this or other forms of malware.