Burned by Fire(fox) (Part I)
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Objective-See's Part I analyzes a macOS backdoor, OSX.NetWire.A, dropped by a Firefox zero-day (CVE-2019-11707) reported by an affected user. The post examines the unsigned persistent binary Finder.app, which VirusTotal flags with only one engine, and traces its links to a 2012 password-stealing Trojan.