Two new pieces of Mac malware in the wild – one being fixed this week

There are two new reports of Mac malware in the wild, with the first of them set to be blocked by an update expected this week. There’s no word yet on a fix for the second, but you’d have to be a pretty naive Mac user to fall for it … Mac malware exploits Parallels vulnerability Macworld reports that the first was publicly revealed by security researcher Mickey Jin after he spent seven months trying to get Parallels to fix it. The exploit involves Parallels, the virtual machine that allows the Mac to run Windows, Linux, and older versions of macOS. The vulnerability is on Intel Macs running Parallels and allows an attacker to gain root access by exploiting holes in the Parallels VM creation routine. Admittedly it wasn’t a major threat, as an attacker would need physical access to your Mac to apply it, but the company has now said it will plug the hole this week. Parallels has posted a knowledgebase article about the flaw, stating that Parallels Desktop 20.2.2 and Parallels Deskto ... Read full article.