Back Nknews

North Korean hackers deploy new macOS malware that tricks AI security tools

Nknews • June 26, 2026

Data-stealing malware uses novel techniques to undermine automated analysis workflows used by cybersecurity teams

Shreyas Reddy June 26, 2026

North Korean-linked cybercriminals are using a newly identified malware family targeting Apple computers, which combines traditional data-stealing capabilities with a novel attempt to manipulate security tools powered by artificial intelligence (AI), according to cybersecurity researchers.

In a report published Tuesday, U.S. cybersecurity firm SentinelLabs outlined the workings of the “macOS.Gaslight” malware, which is designed to infiltrate macOS devices, steal sensitive information and provide remote access to operators.

SentinelLabs assessed with “high confidence” that the malware is linked to DPRK-aligned activity targeting macOS users, noting that Apple’s built-in XProtect security system flags the

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New macOS Gaslight Malware Targets AI Analysis Tools A new macOS malware named 'Gaslight' has been identified, attributed to North Korean threat actors. This malware employs prompt injection techniques to confuse AI-assisted malware analysis tools, embedding 38 fake system messages within its Rust binary. The fabricated messages mimic legitimate developer logs and error reports, aiming to mislead AI systems into aborting their analysis. SentinelLabs reported that the malware not only steals data but also provides remote access to attackers. It uses Telegram's Bot API for command and control, ensuring encrypted communication. The malware's unique approach targets the analysis tools rather than traditional sandbox evasion methods, marking a significant evolution in malware tactics. Apple’s XProtect has flagged the malware, indicating its detection capabilities. The malware is currently active and poses a significant threat to macOS users. 11 sources 73

Extracted Entities

North Korean hackers deploy new macOS malware that tricks AI security tools

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)