#XCSSET

cyber.netsecops.io

New XCSSET Malware Variant Targets macOS Developers via Xcode

Unit 42 details the XCSSET v40 malware, a new variant targeting macOS developers through compromised Xcode projects on platforms like GitHub.

securityonline.info

XCSSET v40 Malware Targets macOS Developers Through Xcode

At a glance Malware family XCSSET (version 40) Threat actor Unattributed; tracked by Unit 42 since 2020, same developer lineage suspected but not named Target macOS software developers, with a heightened volume of attacks across South Asia Delivery vector Poisoned Xcode projects on GitHub and vulnerable Git repositories Key capabilities

www.bleepingcomputer.com

New XCSSET variant targets macOS devs via compromised Xcode projects

A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories.

hackread.com

New Variant of XCSSET Malware Targets macOS Notes and Wallets

Follow us on Bluesky, Twitter (X) and Facebook at @Hackread

meterpreter.org

XCSSET macOS Malware Returns with Stealthy Memory Exploits

The Resurgence of XCSSET Following several months of quiet activity, a notorious malware family targeting software developers has returned with a stealthy upgrade. This malicious tool leaves almost no trace on local disk drives. Security researchers at Palo Alto Networks recently uncovered XCSSET macOS malware version 40 in active campaigns. Since April 2026, this threat has propagated primarily through compromised Xcode projects, the primary development environment for Apple platforms.

www.hendryadrian.com

New XCSSET variant targets macOS devs via compromised Xcode projects

XCSSET version 40 has resurfaced to target macOS users by infecting compromised Xcode projects and GitHub repositories, spreading when developers build the poisoned code. The updated malware adds new Chrome hijacking and Telegram trojanizing modules, along with stronger evasion tactics and aggressive attempts to disable macOS security protections. #XCSSET #Xcode #GitHub #Unit42

cyberveille.ch

XCSSET v40 : nouvelle version du malware macOS avec architecture furtive et modules avancés

Cet article présente une analyse technique approfondie de XCSSET v40, la dernière itération d'une famille de malwares macOS ciblant les développeurs Apple. Après des mois de dormance, les opérateurs ont déployé cette version en avril 2026, avec une seconde vague en mai 2026.

www.microsoft.com

New XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects | Microsoft Security Blog

Microsoft Threat Intelligence has uncovered a new variant of XCSSET, a sophisticated modular macOS malware that infects Xcode projects, in the wild. Its first known variant since 2022, this latest XCS...