Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library used by millions of embedded devices to read FAT and exFAT formats on USB drives and SD cards.
Named after its use of the Pluggable Authentication Modules (PAM) interface to validate stolen login passwords, the malware was identified by security firm Jamf and represents a significant evolution in macOS threat tradecraft.
The Citizen Lab at the University of Toronto identified Greek journalist and former politician Stelios Kouloglou as the victim, marking the first time a member of the European Parliament’s PEGA committee has been publicly identified as a spyware target.