Researchers: North Korean hackers develop new malware that can bypass Apple notarization and invade macOS systems

On November 13th, it was reported that North Korean hackers have developed malicious software that can bypass Apple's security checks. Researchers at Jamf Threat Labs, who focus on Apple, said that these applications appear to be experimental. This is the first time they have seen this technology used to invade Apple's macOS operating system, but it will not run on the latest systems.

Researchers found that Microsoft's VirusTotal online scanning service reported that these applications were harmless, but in reality, they are malicious. These application variants were written in Go and Python languages and used the Google Flutter application. Flutter is an open-source development toolkit that can be used to create multi-platform applications.

Five of the six malicious applications have developer account signatures and have been temporarily certified by Apple. The researchers wrote, "The domain names and technology in this malicious software are very similar to those used in other North Korean hacker malware, indicating that this malicious software has been signed and even temporarily certified by Apple."