{"id":5249,"date":"2016-03-04T17:56:27","date_gmt":"2016-03-04T17:56:27","guid":{"rendered":"https:\/\/kasperskydaily.com\/b2b\/?p=5249"},"modified":"2019-11-15T06:58:46","modified_gmt":"2019-11-15T11:58:46","slug":"back-on-mac-hacking-teams-new-os-x-exploit-examined","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/back-on-mac-hacking-teams-new-os-x-exploit-examined\/5249\/","title":{"rendered":"Back on Mac: Hacking Team’s new OS X exploit examined"},"content":{"rendered":"

Securelist issued <\/a>a quick heads-up on what they called new \u2018implants\u2019 for OS X. It looks as though the notorious Hacking Team is back in business.<\/p>\n

\u2018Missed me?\u2019<\/strong><\/p>\n

Hacking Team is a Milan-based IT company that sells \u201coffensive intrusion and surveillance capabilities to governments, law enforcement agencies and corporations\u201d. In 2015 it suffered a tremendous security breach: over 400 gigabytes of data, including alleged internal e-mails, invoices, and source code were leaked via BitTorrent and Mega. Some exploits previously owned by Hacking Team immediately made its way into the hands of APT actors<\/a>. On the tracks of this breach cybersecurity vendors also made some peculiar discoveries such as a\u00a00-day exploit for Silverlight platform<\/a>, which Hacking Team bought from a third party.<\/p>\n

Of course, for Hacking Team this leak seemed disastrous, to the point where some other entity would immediately call it quits. However, it looks like it\u2019s not the case here.<\/p>\n

Implants<\/strong><\/p>\n

Securelist\u2019s author Dmitry Bestuzhev has previously defined \u201cmobile implants\u201d<\/a> as a strain of spying software \u201csmuggled\u201d into mobile devices so attackers can access the data stored within, as well as eavesdrop on all communications. Hacking Team produced them\u00a0for a number of mobile platform<\/a> \u2013 effectively all of those in use now, including less popular Blackberry and Windows Mobile. These implants vary in their capabilities, but all of them are quite dangerous.<\/p>\n

So is the new one.<\/p>\n

Specifically crafted<\/strong><\/p>\n

Hacking Team builds its implants on-demand for each specific target, so the functionality may provide some information on who is the target. Not always, though.<\/p>\n

Several things are known about this latest implant.<\/p>\n