Apple says it has already beaten new M1 Mac malware

Ransomware
(Image credit: Shutterstock)

Apple has moved to squash the threat of another new malware strain threatening its own-brand M1 Mac silicon devices.

The malware, dubbed "Silver Sparrow" by researchers at security firm Red Canary, was thought to have already infected around 30,000 Apple M1 Macs, as well as targeting some earlier Intel-powered Macs too.

However Apple says it has now stepped in, telling TechRadar Pro it revoked certificates for developer accounts used by the malware's creator to help deliver the malware packages onto victim devices - effectively stopping any new devices from being infected.

Apple attack

The company told AppleInsider that it had acted to reduce any further spread of the malware by revoking these certificates, and that it looks to issue regular software updates to stop its devices being infected.

Silver Sparrow was the second identified M1 Mac malware in a matter of weeks, after an earlier threat was also uncovered recently - although this was found to be fairly standard adware.

Red Canary had estimated that Silver Sparrow infected about 30,000 macOS computers in over 150 countries. It was flagged as particularlt novel for the way it used JavaScript for execution—something the company said it hadn’t previously encountered in other macOS malware 

The malware calls a command and control server every hour from the infected machine to check for further instructions. Till now the researchers haven’t noticed the malware downloading any malicious payloads, which adds to the mystery of the malware’s true intent. 

Via: AppleInsider

TOPICS
Mayank Sharma

With almost two decades of writing and reporting on Linux, Mayank Sharma would like everyone to think he’s TechRadar Pro’s expert on the topic. Of course, he’s just as interested in other computing topics, particularly cybersecurity, cloud, containers, and coding.

Latest in Security
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list
Ransomware
Cl0p resurgence drives ransomware attacks to new highs in 2025
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Latest in News
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Microsoft Surface Laptop and Surface Pro devices on a table.
Hate Windows 11’s search? Microsoft is fixing it with AI, and that almost makes me want to buy a Copilot+ PC
Oura Ring 4
Activity tracking on Oura Ring is about to get a whole lot better, but I've got bad news about your step count
Google Pixel Buds Pro 2
Cleaned your Pixel Buds Pro 2 recently? If not, you might be getting worse sound
Google Maps on a phone being held in someone's hand
Google Maps is getting two key upgrades, for easier route planning and quicker access to Gemini AI
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list