TrendLabs: XCSSET Mac Malware: Infects Xcode Projects, Performs UXSS Attack on Safari, Other Browsers, Leverages Zero-day Exploits

 The UXSS attack is theoretically capable of modifying almost every part of the user’s browser experience as arbitrary JavaScript-injected code. These modifications include:

• Modifying displayed websites
• Modifying /replacing Bitcoin/cryptocurrency addresses
• Stealing amoCRM, Apple ID, Google, Paypal, SIPMarket, and Yandex credentials
• Stealing credit card information from the Apple Store
• Blocking the user from changing passwords but also stealing newly modified passwords
• Capturing screenshots of certain accessed sites

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/xcsset-mac-malware-infects-xcode-projects-performs-uxss-attack-on-safari-other-browsers-leverages-zero-day-exploits/