had this on my radar for a few days.

[da_667@infosec.exchange]

had this on my radar for a few days. There's IP addresses, domains, and some round-about description of the HTTP C2 comms.

Odyssey Stealer: Inside a macOS Crypto-Stealing Operation - Censys

What Is Odyssey Stealer? Odyssey Stealer is a macOS information stealer designed to steal cryptocurrencies. It operates as a Malware-as-a-Service (MaaS) platform with an affiliate-based model, meaning that the C2 infrastructure and admin panel are operated by a controlling group, while independent operators (affiliates) rent access in exchange for a share of the proceeds. Often […]

Censys (censys.com)

I'll have rules for it by the end of the day.

#Mac #Infostealer #Suricata #Malware #ThreatIntel