macOS.Gaslight is a Rust-based implant for macOS that employs a novel prompt-injection payload containing fabricated system messages to interfere with LLM-assisted malware analysis. It uses encrypted communications over Telegram Bot API with certificate pinning and self-redaction to conceal its bot token. The implant offers operators an interactive shell, system reconnaissance, and credential theft capabilities via a Python script that targets sensitive user data such as browser credentials, keychains, and command histories. It dynamically fetches CPython interpreters at runtime and maintains persistence through a LaunchAgent disguised as an Apple system service. The threat is assessed with high confidence as DPRK-aligned and marks a significant advancement in adversarial tactics aimed at analysts rather than traditional sandbox environments.

The implant enables attackers to gain interactive shell access, collect detailed system information, and steal sensitive credentials including browser data and keychain items. Its encrypted and certificate-pinned communications reduce detection likelihood. The prompt-injection payload is designed to mislead and disrupt analysis by security researchers using large language models. Persistence mechanisms allow long-term presence on infected macOS systems. The attribution to DPRK-aligned actors indicates a high level of sophistication and targeted threat activity. There are no known exploits in the wild reported at this time.

No official patch or remediation is currently available for this threat. Since this is a malware implant rather than a software vulnerability, mitigation focuses on detection and removal. Security teams should monitor for indicators of compromise such as the provided file hashes and suspicious LaunchAgent entries masquerading as Apple system services. Network monitoring for unusual Telegram Bot API traffic may assist in detection. Given the advanced evasion techniques, use of endpoint detection and response (EDR) solutions with behavioral analysis is recommended. Patch status is not yet confirmed — check vendor advisories and threat intelligence sources for updates.