macOS zero-day bypasses webcam, storage access alert prompts – iTnews

Security researchers have outlined an ingenious zero-day malware attack that bypassed restrictions in Apple’s macOS operating system that alert users when webcams and microphones on their computers are accessed.
The XCSSET malware that security vendor Trend Micro analysed [pdf] in August last year infects Apple Xcode software development projects for supply-chain attacks.
It has been actively exploiting a zero-day vulnerability to take screenshots of users’ desktops, without requesting permission…

Click here to view the original article.