RustBucket (OS X)

First seen
2023-03-01 00:00:00
Malware type
rat
Family
Malware family
Profile updated
2026-07-07 14:36:49

Targeted industries: government-and-public-sector defense-and-aerospace

Context

RustBucket is a malware designed to target Mac OS X systems, often used for gaining remote access to compromised machines. It is primarily employed in espionage activities, focusing on government and defense sectors.

Reports & references

  • sentinelone.com — Dprk Crypto Theft Macos Rustbucket Droppers Pivot To Deliver Kandykorn Payloads (report)
  • malpedia.caad.fkie.fraunhofer.de — Osx.Rustbucket (report)
  • Kaspersky — 111290 (report)
  • sansorg.egnyte.com — 3P3Hxfingl (report)
  • blogs.jpcert.or.jp — Dangerouspassword (report)
  • jamf.com — Bluenoroff Apt Targets Macos Rustbucket Malware (report)
  • sentinelone.com — Bluenoroff How Dprks Macos Rustbucket Seeks To Evade Analysis And Detection (report)
  • elastic.co — Dprk Strikes Using A New Variant Of Rustbucket (report)

External references