macOS Backdoor Uses Fake Messages to Evade AI Analysis

A newly identified Rust implant for macOS, dubbed macOS.Gaslight, employs a novel technique to evade security analysis. It embeds a collection of fabricated system error messages designed to mislead AI-powered triage tools into aborting their analysis. The malware communicates via a Telegram bot and exhibits self-deleting capabilities for its sensitive tokens.