Analysis of a MacOS Malware Spotted with Old Dridex Sample
Originally, this post claimed that Dridex had returned. However, further research and analysis has led us to believe that the initial conclusion was incorrect. There are currently no active campaigns that use the tactics and techniques employed by the macOS malware sample, which has a binary with an old Dridex variant embedded in it.
Article title: ‘Dridex Returns, Targets MacOS Using New Entry Method
Author: Armado Pedragoza
Trend Micro Research has unpublished the article titled ‘Dridex Returns, Targets MacOS Using New Entry Method, authored by Armando Pedragoza.
Originally, this post claimed that Dridex had returned. However, further research and analysis has led us to believe that the initial conclusion was incorrect. There are currently no active campaigns that use the tactics and techniques employed by the macOS malware sample, which has a binary with an old Dridex variant embedded in it. The malware sample in question has been around since 2019. As of the time of writing, we have not seen this sample being used in the wild. Thus, it is not accurate to state that Dridex has returned.