macOS.Macma
macOS.Macma is a threat that was created to provide backdoor access to its developers, so they can collect information from the computers it infects. Security researchers uncovered numerous APT (Advanced Persistent Threats) groups using macOS.Macma to keep track of activists and journalists' activities when they access websites that promote pro-democracy activities in China.
macOS.Macma can gain persistence on the devices that matches its data requirements so that it can execute its activities without being removed suddenly. When inside a machine, macOS.Macma can record the keystrokes and audio and video via integrated cameras and microphones, download files, take screenshots, and collect data such as the IP address, UUID (Universally Unique Identifier), details about the CPU usage, memory and disk space available, Mac address and much more.
Malware such as macOS.Macma has multiple ways to enter a computer. The more used ones are social engineering tricks, phishing and spam emails, Peer-to-Peer networks and corrupted websites. Therefore, to avoid threats such as macOS.Macma you need to be very strict with what you click, sited you visit and allow inside your computer.
