Silver Sparrow

Recently, a new malware named "Silver Sparrow" has been discovered targeting both M1 and Intel-based Macs, including iPhones and iPads. This sophisticated malware is believed to be the first to target Apple's new M1 chip and has been found active in more than 30 countries, including the United States, Canada, Germany, the UK and France.

What makes Silver Sparrow unique?

What makes Silver Sparrow unique is its use of JavaScript for payload execution, a technique that has not been seen before in other macOS malware. The malware also uses a launch agent to execute the payload, which makes it difficult to detect and remove. While the primary objective of Silver Sparrow is not clear, it has been found to be downloading a secondary payload from a command and control server. This payload has not been found yet, which makes it hard to understand the true nature of this malware. It is believed that this malware could be used for data exfiltration, espionage or ransomware.

It's important to note that Silver Sparrow is being distributed through malicious ads on websites, and clicking on these ads can lead to the download and installation of the malware on the device. This highlights the importance of employee education and training to ensure they are aware of the dangers of clicking on suspicious ads or links.

To protect your company from Silver Sparrow, it's important to implement a multi-layered security approach. This includes employing PrivacyCase technology anywhere sensitive conversations, meetings or planning sessions are taking place. Being cautious when browsing the internet, keeping software updated, using a reputable antivirus software to scan devices, and being aware of any suspicious activity on devices. Additionally, practice good cyber hygiene by using strong passwords, enabling two-factor authentication, and avoiding sharing sensitive information online.

It's your responsibility to ensure the safety and security of your company's sensitive information. The discovery of Silver Sparrow malware targeting both M1 and Intel-based Macs, including iPhones and iPads, is a reminder that cyber threats are constantly evolving and it's important to stay informed and take steps to protect your company.