Google researchers found a watering hole attack in late August exploiting a now-patched zero-day in Apple’s MacOS operating system. The attack targeted Hong Kong websites related to a media outlet and a prominent pro-democracy labor and political group to deliver a never-before-seen backdoor on compromised machines. The malware, a fully-featured implant, is marked by “extensive software engineering” with capabilities to record audio and keystrokes, fingerprint the device, download and upload arbitrary files, and execute malicious terminal commands.”]
Source: https://thehackernews.com/2021/11/hackers-exploit-macos-zero-day-to-hack.html