CDrivers Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 25, 2025
Last Seen
November 26, 2025

CDrivers is a macOS-targeted malware family that appears within the FlexibleFerret threat ecosystem.

Overview

CDrivers is a macOS-targeted malware family that appears within the FlexibleFerret threat ecosystem. Recent reporting highlights an updated macOS infection chain and the introduction of a Go-based backdoor, indicating a modular, loader/backdoor approach on macOS. This underscores the growing risk to macOS endpoints and the use of Go to build cross-platform capabilities.

Related Threat Clusters

  • Revamped FlexibleFerret Malware Chain Targets macOS Systems

    The North Korea-linked FlexibleFerret malware has been updated to enhance its stealth and persistence on macOS systems. The new attack chain includes a second-stage shell script that fetches payloads based on the system…

    2 articles · Updated November 26, 2025

Recent Intelligence Reports

  • Updated FlexibleFerret malware chain against macOS uncovered — Scworld · November 26, 2025
  • New FlexibleFerret Malware Chain Targets macOS With Go Backdoor — Infosecurity-Magazine · November 25, 2025

CVSS v3.1 Breakdown