S0369 CoinTicker

malwareEnterprise

platformsmacOS

also known asCoinTicker

CoinTicker is a malicious application that poses as a cryptocurrency price ticker and installs components of the open source backdoors EvilOSX and EggShell.

techniques used (9)

ATT&CK techniques this enables or maps to.

T1027Obfuscated Files or Information
T1059.003Windows Command Shell
T1059.004Unix Shell
T1059.006Python
T1105Ingress Tool Transfer
T1140Deobfuscate/Decode Files or Information
T1543.001Launch Agent
T1553.001Gatekeeper Bypass
T1564.001Hidden Files and Directories

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan