SHOW NOTES

In this episode of SecOps Weekly, Senior Intelligence Analyst Stef Rand and Senior Malware Analyst Tony Lambert discuss the July Intelligence Insights. They talk about the dominance of ClearFake and dive into the emergence of CastleLoader, a newcomer to the top 10. The analysts also explore the evolution of macOS malware, specifically how attackers are using ASCII character code obfuscation in AppleScript to bypass Apple’s XProtect YARA signatures.

TIMESTAMPS

• 00:10: Welcome to SecOps Weekly!
• 01:24: July’s Top 10
• 06:57: The emergence of CastleLoader
• 18:48: Mac malware shadiness
• 26:25: Mac malware AMA