OSX/MaMi (DNSUnlocker)
 
Happy Aloha Friday Patrons! 2018 is barely two weeks old and already it looks like we've got new piece of Mac malware :(

Yesterday afternoon I got a heads up on something that wasn't being flagged by any anti-virus products (on VirusTotal) but seemed possibly shady. 

Spent the evening digging into it to confirm it was definitely malicious - and decided to blog about my findings. Read: "Ay MaMi - Analyzing a (new?) macOS DNS Hijacker: OSX/MaMi"  In short, the malware will install a malicious certificate and hijack DNS settings to redirect network traffic (perhaps to inject ads, or sniff for credentials). It seems related some Windows malware named DNSUnlocker. 

The good news is, its likely that in order to become infected a Mac user has to be tricked into running some malicious code. Also, I pinged Apple so it's on their radar now too, and AV signatures are starting to trickle in. 

If the malware does persist (it didn't in my VM), tools such as KnockKnock and BlockBlock will detect that. Also LuLu (still in alpha) will detect the outgoing malicious traffic:

Mahalo for your on-going support! 

-patrick


Tier Benefits
Pledge $0 or more per month
patrons
Everyone
Pledge $0.01 or more per month
patrons
Patrons Only
2^0
$1 or more per month 587 patrons
Every dollar counts, so mahalo! 🙏   At this tier, you'll gain official patron status and access to beta releases of all Objective-See tools.
2^2
$4 or more per month 187 patrons
Moving on up! At this tier level you'll get to directly influence Objective-See, by voting on new features and tools 🛠️
2^3
$8 or more per month 81 patrons
At this tier level you'll get early access to all (non-time sensitive) Objective-See blog posts ✍️  ,  as well as all other recieving all other lower-tier rewards!
2^4
$16 or more per month 31 patrons
Double-digits, you rock! At this tier, besides recieving all other lower-tier rewards, as a small token of your incredible support, your name will appear the source code of new versions of Objective-See's open-source tools 👍
2^6
$64 or more per month 6 patrons
64bit is all the rage, and at this tier, so are you!! As a mahalo for your incredible generosity, your name will appear in all new releases of Objective-See's tools that are distributed around the world 🌍 🔝  Of course, you'll also have access to all lower-tier rewards as well!
2^8
$256 or more per month 4 patrons
Whoa, stoked at your generosity 😍


At this tier you have top priority to win tickets to many of cyber-security conferences I speak at, such as BlackHat, DefCon, and more 🎟️

Friend of Objective-See (Bronze)
$1,000 or more per month 1 patron
Join the "Friends of Objective-See" program! 


See: https://objective-see.com/friends.html for details

Friend of Objective-See (Silver)
$2,500 or more per month 0 patrons
Join the "Friends of Objective-See" program! 


See: https://objective-see.com/friends.html for details

Friend of Objective-See (Gold)
$5,000 or more per month 0 patrons
Join the "Friends of Objective-See" program!


See: https://objective-see.com/friends.html for details

Recent Posts