Malware is sloppily written, but poses little risk to users, researchers say. Malware was created by a group nicknamed Charming Kitten, which they believe is connected to Iranian security companies. The human rights community in Iran tends to put more faith in the security of Apple products because they’re generally targeted less than Windows devices. MacDownloader was originally designed as a fake virus removal tool and in order to fit a particular social engineering attempt; it was later repackaged as an Adobe Flash Player update.”]
Source: https://www.cuinfosecurity.com/researchers-see-links-between-iran-mac-malware-a-9672