Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Steven Du
Prolonged remission with ibrutinib maintenance therapy following radiation in a patient with relapsed primary CNS lymphoma
1. Introduction Primary CNS lymphoma (PCNSL) is a rare and aggressive subtype of non-Hodgkin's lymphoma that originates in lymphocytes and develops in the CNS, specifically the brain, spinal cord, eyes, or leptomeninges. PCNSL has an incidence rate of 0.5 per 100,000 persons per year, with 1500 new cases per year in the USA alone [1]. The outcomes of PCNSL are suboptimal. Left untreated, the median overall survival (OS) is approximately 1.5 months [2].
Mac Users Targeted by Trojanized iTerm2 App
Earlier this month, a user on Chinese question-and-answer website Zhihu reported that a search engine result for the keyword “iTerm2” led to a fake website called item2.net that mimics the legitimate iterm2.com (Figure 1). A fake version of the iTerm2 app, a macOS terminal emulator, can be downloaded from a link found in iterm2.net. When this app is executed, it downloads and runs g.py, a malicious Python script from 47[.]75[.]123[.]111.
StrongPity APT Group Deploys Android Malware for the First Time
We recently conducted an investigation into a malicious Android malware sample, which we believe can be attributed to the StrongPity APT group, that was posted on the Syrian e-Gov website. To the best of our knowledge, this is the first time that the group has been publicly observed using malicious Android applications as part of its attacks. We first learned about the sample from a thread shared on the MalwareHunterTeam Twitter.
Updated XCSSET Malware Targets Telegram, Other Apps
In our last update on the XCSSET campaign, we updated some of its features targeting latest macOS 11 (Big Sur). Since then, the campaign added more features to its toolset, which we have continually monitored. We have also discovered the mechanism used to steal information from various apps, a behavior that has been present since we first discussed XCSSET.
New MacOS Backdoor Connected to OceanLotus Surfaces
We recently discovered a new backdoor we believe to be related to the OceanLotus group. Some of the updates of this new variant (detected by Trend Micro as Backdoor.MacOS.OCEANLOTUS.F) include new behavior and domain names. As of writing, this sample is still undetected by other antimalware solutions. Due to similarities in dynamic behavior and code with previous OceanLotus samples, it was confirmed to be a variant of the said malware. Figures 1-2.
Updates on ThiefQuest, the Quickly-Evolving macOS Malware
By Steven Du, Gabrielle Mabutas, and Luis Magisa Right as July of this year began, we noticed an emerging malware dubbed by most as ThiefQuest (also known as EvilQuest), a threat that targets macOS devices, encrypts files, and installs keyloggers in affected systems. It has been found in pirated versions of macOS shared on popular torrent sites.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Steven
Contact Steven, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack