Do Son The SwiftLoader droppers from RustBucket were repurposed to deliver KandyKorn payloads, showcasing a recycling of tools
ObjCShellz
Jamf Threat Labs has recently uncovered a discreet, yet potent, malware variant tied to the notorious BlueNoroff APT group