UN Panel of Experts S/2023/656
RustBucket macOS malware · April 2023; June 2023 (updated version)
Para 117: “In April, BlueNoroff was, for the first time, observed targeting macOS users through a new macOS malware, dubbed RustBucket, which masquerades as a PDF viewer application, luring victims to download and open the application. RustBucket then deploys a trojan, allowing BlueNoroff to perform actions such as stealing sensitive information, deleting or modifying files, installing additional malware and remotely controlling the compromised system. In June, another cybersecurity company detected an updated version of RustBucket ...”