Research led by Ferdous Saljooki. Background Jamf Threat Labs has identified a new malware variant attributed to the BlueNoroff APT group. BlueNoroff’s campaigns are financially motivated, frequently targeting cryptocurrency exchanges, venture capital firms and banks. During our routine threat hunting, we discovered a Mach-O universal binary communicating with a domain that Jamf has previously cla
![Jamf Threat Labs Discovers Malware from BlueNoroff](https://cdn-ak-scissors.b.st-hatena.com/image/square/e750b9328939d79471ec978c04d3c929470fc3bf/height=288;version=1;width=512/https%3A%2F%2Fmedia.jamf.com%2Fimages%2Fnews%2Fbluenoroff.jpeg%3Fh%3D400%26q%3D80%26w%3D600)