SimpleTea (OS X)
- First seen
- 2023-09-01 00:00:00
- Malware type
- rat
- Profile updated
- 2026-07-07 14:30:00
Context
SimpleTea is a RAT for macOS that is based on the same object-oriented project as SimpleTea for Linux (SimplexTea). It also shares similarities with POOLRAT (also known as SIMPLESEA), like the supported commands or a single-byte XOR encryption of its configuration. However, the indices of commands are different. SimpleTea for macOS was uploaded to VirusTotal from Hong Kong and China in September 2023.
Reports & references
- mp.weixin.qq.com — S (report)
- malpedia.caad.fkie.fraunhofer.de — Osx.Simpletea (report)
- web-assets.esetstatic.com — Eset Apt Activity Report Q2 2023 Q3 2023 (report)