"RustDoor: New macOS Malware Linked to Ransomware Groups"

A new Rust-based macOS malware, known as RustDoor, is being distributed as a fake Visual Studio update and provides backdoor access to compromised systems. The malware communicates with command and control servers linked to the ALPHV/BlackCat ransomware gang, potentially indicating a connection to ransomware operations. It is primarily distributed as an updater for Visual Studio for Mac and has been undetected for at least three months. RustDoor has the capability to control compromised systems, exfiltrate data, and establish persistence by modifying system files, using commands such as shell execution, file manipulation, and process termination.