Loading malware…
Gaslight is a Rust-based macOS malware family combining backdoor and information-stealing functionality. It has been attributed with high confidence to DPRK-aligned threat activity and fits a broader pattern of North Korean operations that use social-engineering lures, including recruiter, game developer, or software tester personas, to entice Mac users into executing malicious content.
On infected systems, Gaslight supports remote command execution and follow-on payload delivery through a Telegram-based command-and-control channel. Reported operator capabilities include interactive shell access, command execution, process termination, file theft, and malware self-termination. The malware uses encrypted command-and-control communications and includes anti-analysis measures such as runtime API resolution, proxy awareness, and persistence via a LaunchAgent masquerading in Apple-style naming conventions.
Gaslight also deploys a separate stealer component using shell and Python stages. Its collection scope includes browser data from Chrome, Brave, Firefox, and Safari; terminal command histories; installed application inventories; running process information; hardware and system details; and the encrypted macOS login keychain database. Collected data is archived and exfiltrated to the operator-controlled channel.
A distinctive feature of Gaslight is its inclusion of fabricated system-style messages and prompt-injection-like text intended to mislead AI-assisted malware analysis workflows. These embedded strings imitate crash reports, diagnostics, and developer warnings in an apparent attempt to cause automated or LLM-assisted analysis tools to truncate, abort, or misinterpret analysis. This technique targets the perception of AI-driven analysis rather than sandbox execution. While public reporting has not established that this mechanism successfully defeats production AI malware-analysis platforms, it demonstrates active experimentation with anti-analysis tradecraft tailored to AI-assisted security operations.
Apple added XProtect detections for this malware family in 2026, and reporting has linked it to broader BONZAI and AIRPIPE-associated DPRK macOS activity.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
25 distinct techniques documented for this family, organized by ATT&CK tactic.
...малварь постоянно опрашивает управляющий канал и предоставляет своим операторам интерактивный шелл, позволяя выполнять команды в системе...
"New Gaslight malware uses prompt injection to evade AI analysis" ... #T1059004
Buried inside is a 6.6 KB Python script, encoded in base64, that handles the actual data theft.
This implant’s plist carries the Label value com.apple.system.services.activity. Masquerading within Apple’s com.apple.* namespace is a tactic widely used in many macOS malware families, including those previously tied to DPRK-linked activities.
Once installed, Gaslight can pull browser data from Chrome, Brave, Firefox, and Safari, grab terminal command histories, list installed apps, and copy the encrypted keychain file that stores Mac passwords.
Once installed, Gaslight can pull browser data from Chrome, Brave, Firefox, and Safari
"New Gaslight malware uses prompt injection to evade AI analysis" ... #T1057
For command and control, Gaslight relies on a Telegram bot, encrypted with AES-GCM and configured with a custom certificate to dodge standard network inspection.
Communication with the attacker is handled via a command-and-control loop operating over the Telegram Bot API, utilizing AES-GCM encrypted payloads over certificate-pinned TLS.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
macOS malware cited as a related prior example of using deceptive content to mislead AI analysis tools.
macOS malware that embedded fake system-failure messages inside its binary to manipulate AI-assisted malware analysis tools into aborting analysis.
A Rust-based macOS malware attributed in the article to North Korean threat actors. It steals browser data, terminal histories, installed-app listings, and encrypted keychain files, and also provides backdoor access for command execution and payload delivery. The article highlights its unusual use of embedded prompt-injection style text intended to confuse AI-assisted security analysis tools.
Gaslight is described as malware targeting macOS that uses prompt injection to evade AI analysis. The tags suggest information discovery, process discovery, credential theft from password stores, and likely abuse of Telegram-related functionality.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.