Do Son XCSSET v40 malware infects macOS developers through poisoned Xcode projects on GitHub, then hides in memory. Unit 42 found 17 modules and Chrome hijacking.
Xcode
A new XCSSET variant targets macOS developers by infecting Xcode projects. It now steals Firefox data, hijacks clipboards for crypto theft, and enhances its persistence.
Apple's Xcode 26 beta reveals plans for native integration with Claude Sonnet 4 and Claude Opus 4, giving developers a new AI assistant option.