New ZuRu Malware Variant Targeting Developers via Trojanized Termius macOS App
Researchers studying cybersecurity have found new artifacts linked to the ZuRu malware, which infects Apple macOS and spreads via trojanizing genuine software.
According to SentinelOne's latest research, which was published with The Hacker News, the malware was discovered in late May 2025 posing as the server-management utility and cross-platform SSH client Termius.
According to researchers Phil Stokes and Dinesh Devadoss, ZuRu malware still preys on macOS users looking for genuine business tools, modifying its loader and C2 tactics to backdoor its targets.
In September 2021, a user on the Chinese question-and-answer website Zhihu first reported ZuRu as part of a malicious campaign that deceived unwary users into downloading the virus by diverting their searches for the legitimat...