苹果认证被滥用：黑客用真实证书为macOS恶意软件披上合法外衣

IT之家2025-12-30

IT之家 12 月 30 日消息，过去很多人认为 macOS 较为安全，其实原因是 macOS 用户基数较小，黑客兴趣不大，但随着 Mac 市占率持续增长，恶意软件问题亦愈趋严重。Jamf 威胁实验室 12 月 22 日就披露了一种最新的 macOS 恶意软件。苹果 Mac App Store 之外的应用程序必须经过加密签名和认证，但 Jamf 指出 —— 黑客正在通过地下渠道购买或窃取真实的...

网页链接

免责声明：本文观点仅代表作者个人观点，不构成本平台的投资建议，本平台不对文章信息准确性、完整性和及时性做出任何保证，亦不对因使用或信赖文章信息引发的任何损失承担责任。

精彩评论

我们需要你的真知灼见来填补这片空白

发表看法

{"i18n":{"language":"zh_CN"},"isChannel":false,"data":{"share":"https://www.laohu8.com/m/news/2595549767?lang=zh_CN&edition=full","thumbnail":"","is_english":false,"pubTime":"2025-12-30 15:45","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2595549767","market":"hk","top_or_hot":-1,"title":"苹果认证被滥用：黑客用真实证书为macOS恶意软件披上合法外衣","media":"IT之家","content":"<div>\n<p>IT之家 12 月 30 日消息，过去很多人认为 macOS 较为安全，其实原因是 macOS 用户基数较小，黑客兴趣不大，但随着 Mac 市占率持续增长，恶意软件问题亦愈趋严重。Jamf 威胁实验室 12 月 22 日就披露了一种最新的 macOS 恶意软件。苹果 Mac App Store 之外的应用程序必须经过加密签名和认证，但 Jamf 指出 —— 黑客正在通过地下渠道购买或窃取真实的...</p>\n\n<a href=\"https://tech.ifeng.com/c/8pVSfdn2T9I\">网页链接</a>\n\n</div>\n","source":"fenghuang_stock","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>苹果认证被滥用：黑客用真实证书为macOS恶意软件披上合法外衣</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\n苹果认证被滥用：黑客用真实证书为macOS恶意软件披上合法外衣\n</h2>\n\n<h4 class=\"meta\">\n\n\n2025-12-30 15:45 北京时间&nbsp;&nbsp;&nbsp;<a href=https://tech.ifeng.com/c/8pVSfdn2T9I><strong>IT之家</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>IT之家 12 月 30 日消息，过去很多人认为 macOS 较为安全，其实原因是 macOS 用户基数较小，黑客兴趣不大，但随着 Mac 市占率持续增长，恶意软件问题亦愈趋严重。Jamf 威胁实验室 12 月 22 日就披露了一种最新的 macOS 恶意软件。苹果 Mac App Store 之外的应用程序必须经过加密签名和认证，但 Jamf 指出 —— 黑客正在通过地下渠道购买或窃取真实的...</p>\n\n<a href=\"https://tech.ifeng.com/c/8pVSfdn2T9I\">网页链接</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"LU2361044949.HKD","symbol_name":"WELLINGTON US QUALITY GROWTH \"A\" (HKD) ACC","start_time":0,"source_url":"https://tech.ifeng.com/c/8pVSfdn2T9I","article_id":"2595549767","we_media_id":null,"thumbnails":[],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=2595549767","pubTimestamp":1767080740,"columns":[],"sourceInfo":{"source_id":"fenghuang_stock","name":"凤凰网"},"weMediaInfo":null,"summary":"IT之家 12 月 30 日消息，过去很多人认为 macOS 较为安全，其实原因是 macOS 用户基数较小，黑客兴趣不大，但随着 Mac 市占率持续增长，恶意软件问题亦愈趋严重。Jamf 威胁实验室 12 月 22 日就披露了一种最新的 macOS 恶意软件。这些恶意软件因拥有苹果的“公证证书”，在安装时看起来与合法软件毫无二致，所以能完美躲过苹果安全审查。Jamf 安全研究人员在对内部 YARA 规则命中样本进行分析时，发现了一种与以往不同的 macOS “木马”型恶意软件。","collect":0,"end_time":0,"defaultTopTitle":"ifeng.com","property":[],"viewcount":null,"language":"zh","relate_stocks":{"LU2361044949.HKD":"WELLINGTON US QUALITY GROWTH \"A\" (HKD) ACC","BK4579":"人工智能","LU1823568750.SGD":"Fidelity Global Technology A-ACC SGD","LU0158827948.USD":"ALLIANZ GLOBAL SUSTAINABILITY \"A\" (USD) INC","IE00BJJMRY28.SGD":"Janus Henderson Balanced A Inc SGD","LU2505996681.GBP":"WELLINGTON MULTI-ASSET HIGH INCOME \"AM4H\" (GBPHDG) INC","LU1914381329.SGD":"Allianz Best Styles Global Equity Cl ET Acc H2-SGD","LU2505996509.AUD":"WELLINGTON MULTI-ASSET HIGH INCOME \"AM4H\" (AUDHDG) INC","BK4574":"无人驾驶","LU2552382215.SGD":"WELLINGTON US BRAND POWER \"A\" (SGDHDG) ACC","IE00BJTD4N35.SGD":"Neuberger Berman US Long Short Equity A1  Acc SGD-H","BK4573":"虚拟现实","LU2552382058.USD":"WELLINGTON US BRAND POWER \"A\" (USD) ACC","BK4581":"高盛持仓","LU2430703251.USD":"WELLINGTON MULTI-ASSET HIGH INCOME \"AM4\" (USD) INC","LU0823421333.USD":"BNP PARIBAS DISRUPTIVE TECHNOLOGY \"C\" (USD) ACC","LU2552382132.HKD":"WELLINGTON US BRAND POWER \"A\" (HKD) ACC","LU2430703178.SGD":"WELLINGTON MULTI-ASSET HIGH INCOME \"AM4H\" (SGDHDG) INC","LU0823421416.USD":"BNP PARIBAS DISRUPTIVE TECHNOLOGY \"C\" (USD) INC","IE00B19Z8X17.USD":"FTGF CLEARBRIDGE US LARGE CAP GROWTH  \"AG\" (USD) ACC","LU2430703095.HKD":"WELLINGTON MULTI-ASSET HIGH INCOME \"AM4\" (HKD) INC","LU2458330169.SGD":"FRANKLIN SHARIAH TECHNOLOGY \"A\" (SGD) ACC","LU1935042215.USD":"MANULIFE GF GLOBAL MULTI-ASSET DIVERSIFIED INCOME  \"AA\" (USD) INC A","LU0861579265.USD":"联博低波幅策略股票基金A","LU2023251221.USD":"ALLIANZ GLOBAL SUSTAINABILITY \"AM\" (USD) INC","LU2458330243.SGD":"FRANKLIN SHARIAH TECHNOLOGY \"A-H1\" (SGDHDG) ACC","LU0823434583.USD":"BNP PARIBAS US GROWTH \"C\" (USD) ACC","LU0210536198.USD":"JPM US GROWTH \"A\" ACC","LU0823434740.USD":"BNP PARIBAS US GROWTH \"C\" (USD) INC","LU2896262040.SGD":"JPM US GROWTH FUND \"A\" (SGD) ACC","LU0354030511.USD":"ALLSPRING  U.S. LARGE CAP GROWTH \"I\" (USD) ACC","LU1732800096.USD":"摩根大通环球收益基金A (irc)","LU0345770308.USD":"NINETY ONE GSF GLOBAL STRATEGIC EQUITY \"A\" (USD) ACC","LU0354030438.USD":"富国美国大盘成长基金Cl A Acc","LU1720051108.HKD":"ALLIANZ GLOBAL ARTIFICIAL INTELLIGENCE \"AT\" (HKD) ACC","LU2487616109.SGD":"JPM AMERICA EQUITY \"A\" (SGD) ACC","LU1582986359.USD":"M&G (LUX) INCOME ALLOCATION \"A-H\" (USDHDG) ACC","LU0965509283.SGD":"AB LOW VOLATILITY EQUITY PORTFOLIO \"AD\" (SGDHDG) INC","SG9999018865.SGD":"United Global Quality Growth Fd Cl Dist SGD-H","LU0210528500.USD":"JPM AMERICA EQUITY \"A\" ACC","LU1814569148.SGD":"WELLINGTON GLOBAL QUALITY GROWTH \"D\" (SGDHDG) ACC","IE00B4YYXB79.USD":"PIMCO BALANCED INCOME AND GROWTH \"E\" (USD) ACC","LU0069063385.USD":"SUSTAINABLE GLOBAL THEMATIC PORTFOLIO \"A\" (USD) ACC","LU2065169927.USD":"M&G (LUX) GLOBAL MAXIMA \"A\" (USD) ACC","LU1629891620.HKD":"ALLIANZ INCOME AND GROWTH \"AMG2\" (H2-HKD) INC","SG9999018857.SGD":"United Global Quality Growth Fd Cl Acc SGD-H","IE00BSNM7G36.USD":"NEUBERGER BERMAN SYSTEMATIC GLOBAL SUSTAINABLE VALUE \"A\" (USD) ACC","LU1935042488.USD":"MANULIFE GF GLOBAL MULTI-ASSET DIVERSIFIED INCOME  \"AA\" (USD) INC","BK4170":"电脑硬件、储存设备及电脑周边","LU0203202063.USD":"AB SICAV I - ALL MARKET INCOME PORTFOLIO \"A2X\" (USD) ACC","SG9999015986.USD":"LIONGLOBAL DISRUPTIVE INNOVATION \"I\" (USD) ACC","IE0009356076.USD":"JANUS HENDERSON GLOBAL TECHNOLOGY AND INNOVATION \"A2\" (USD) ACC","LU1917777945.USD":"安联专题基金Cl AT Acc","LU0203201768.USD":"AB SICAV I - ALL MARKET INCOME PORTFOLIO \"AX\" (USD) INC","LU1732799900.SGD":"JPMorgan Investment Funds - Global Income A (irc) SGD-H","LU1720051017.SGD":"Allianz Global Artificial Intelligence AT Acc H2-SGD","LU1699723380.USD":"ALLSPRING GLOBAL LONG/SHORT EQUITY \"AP\" (USD) ACC","LU1804176565.USD":"EASTSPRING INV GLOBAL GROWTH EQUITY \"A\" (USD) ACC","LU1244550221.USD":"FRANKLIN GLOBAL MULTI-ASSET  INCOME \"A\" (USDHEDGED) INC (M)","LU0149725797.USD":"汇丰美国股市经济规模基金","LU0057025933.USD":"SUSTAINABLE GLOBAL THEMATIC PORTFOLIO \"AX\" (USD) ACC","SG9999014542.SGD":"United Income Focus Trust Acc SGD","LU2452424414.USD":"BGF ESG MULTI-ASSET \"A10\" (USDHDG) INC","LU0882574139.USD":"富达环球消费行业基金A ACC","LU0784385170.HKD":"BGF GLOBAL MULTI ASSET INCOME \"A6\" (HKDHGD) INC","LU1852331112.SGD":"Blackrock World Technology Fund A2 SGD-H","LU2063271972.USD":"富兰克林创新领域基金","LU0784385840.USD":"Blackrock Global Multi-Asset Income A2 USD","BK4566":"资本集团","LU1242518931.SGD":"Fullerton Lux Funds - Asia Absolute Alpha A Acc SGD","BK4515":"5G概念","LU2213496289.HKD":"ALLIANZ INCOME AND GROWTH \"AT\" (HKD) ACC","LU0127658192.USD":"EASTSPRING INVESTMENTS GLOBAL TECHNOLOGY \"A\" (USD) ACC","LU1037948897.HKD":"AB LOW VOLATILITY EQUITY PORTFOLIO \"AD\" (HKD) INC","LU0345768153.USD":"NINETY ONE GSF GLOBAL STRATEGIC MANAGED \"A\" (USD) ACC","LU0198837287.USD":"UBS (LUX) EQUITY SICAV - USA GROWTH \"P\" (USD) ACC","LU0265550359.USD":"BGF SYSTEMATIC GLOBAL ENHANCED EQUITY YIELD \"A2\" (USD) ACC","LU2023250504.SGD":"Allianz Thematica Cl AMg DIS H2-SGD","LU1037948541.HKD":"AB LOW VOLATILITY EQUITY PORTFOLIO \"A\" (HKD) ACC","SG9999000418.SGD":"Aberdeen Standard Global Technology SGD","LU1791710582.SGD":"Fidelity Global Demographics A-ACC-SGD (SGD/USD hedged)","LU1791710400.SGD":"Fidelity Global Demographics A-ACC-SGD","LU1935043536.SGD":"MANULIFE GF GLOBAL MULTI-ASSET DIVERSIFIED INCOME \"AA\" (SGDHDG) INC A","LU0056508442.USD":"贝莱德世界科技基金A2","BK4512":"苹果概念","LU2265009873.SGD":"Eastspring Investments - Global Growth Equity AS SGD-H","LU0215105999.USD":"SCHRODER ISF GLOBAL EQUITY \"A\" ACC","SG9999001424.SGD":"United E-Commerce Fund SGD","LU0868494708.USD":"UBS (LUX) EQUITY SICAV - US TOTAL YIELD SUSTAINABLE \"P\" (USD) INC","LU0267386448.USD":"FIDELITY FIRST ALL COUNTRY WORLD \"A\" (USD) INC","IE00B1BXHZ80.USD":"Legg Mason ClearBridge - US Appreciation A Acc USD","LU1261432733.SGD":"Fidelity World A-ACC-SGD","LU0786609619.USD":"高盛全球千禧一代股票组合Acc","LU2092937148.SGD":"Blackrock ESG Multi-Asset A8 SGD-H","LU2092627202.USD":"Blackrock ESG Multi-Asset A8 USD-H","IE00BJTD4V19.USD":"NEUBERGER BERMAN US LONG SHORT EQUITY \"A1\" (USD) ACC","LU2077746001.SGD":"Blackrock ESG Multi-Asset A2 SGD-H","LU2237443465.HKD":"abrdn SICAV I -  GLOBAL DYNAMIC DIVIDEND \"A\" (HKD) INC","LU0724617625.USD":"BGF GLOBAL ALLOCATION \"A4\" (USD) INC","LU1496350502.SGD":"FRANKLIN DIVERSIFIED DYNAMIC \"A\" (SGDHDG) ACC","LU1674673691.USD":"HSBC GIF GLOBAL LOWER CARBON EQUITY \"AD\" (USD) INC","LU0210533765.USD":"JPM GLOBAL GROWTH \"A\" (USD) ACC","LU0788109477.HKD":"BGF GLOBAL ALLOCATION \"A2\" (HKDHGD) ACC","LU1674673428.USD":"HSBC GIF GLOBAL LOWER CARBON EQUITY \"AC\" (USD) ACC","IE00B3S45H60.SGD":"Neuberger Berman US Multicap Opportunities A Acc SGD-H","LU0234570918.USD":"高盛全球核心股票组合Acc Close","LU1718418525.SGD":"JPMorgan Investment Funds - Global Select Equity A (acc) SGD","LU2456880835.USD":"ALLIANZ GLOBAL INCOME \"AT\" (USD) ACC","LU2133065610.SGD":"JPMorgan Investment Funds - Global Dividend A (mth) SGD","LU0726765562.USD":"JPM GLOBAL INCOME \"A\" (USD HEDGED) INC","LU0080751232.USD":"富达环球多元动力基金A","LU2125154778.USD":"ALLSPRING GLOBAL EQUITY ENHANCED INCOME \"A\" (USD) INC","LU2347655073.USD":"JPM GLOBAL INCOME \"A\" (USDHDG) INC A","LU1206712785.SGD":"Aviva Investors - Multi-Strategy Target Return Ah SGD","LU2097344431.USD":"SCHRODER ISF SUSTAINABLE MULTI-ASSET INCOME \"A\" (USDHDG) INC","LU1935042991.SGD":"MANULIFE GF GLOBAL MULTI-ASSET DIVERSIFIED INCOME  \"AA\" (SGDHDG) INC","LU0234572021.USD":"高盛美国核心股票组合Acc","LU0070217475.USD":"JPM GLOBAL SELECT EQUITY \"A\" ACC","LU2097344357.USD":"SCHRODER ISF SUSTAINABLE MULTI-ASSET INCOME \"A\" (USDHDG) ACC","IE00BKVL7J92.USD":"Legg Mason ClearBridge - US Equity Sustainability Leaders A Acc USD","LU1206713676.USD":"Aviva Investors - Multi-Strategy Target Return Ah USD","BK4505":"高瓴资本持仓","IE00BWXC8680.SGD":"PINEBRIDGE US LARGE CAP RESEARCH ENHANCED \"A5\" (SGD) ACC","LU1506573853.SGD":"MANULIFE GF GLOBAL EQUITY \"AA\" (SGD) INC","SG9999015952.SGD":"LIONGLOBAL DISRUPTIVE INNOVATION \"I\" (SGD) ACC","LU0672654240.SGD":"FTIF - Franklin US Opportunities A Acc SGD-H1","LU0494093205.USD":"贝莱德ESG灵活多元资产A2 USD-H","LU0170899867.USD":"EASTSPRING INVESTMENTS WORLD VALUE EQUITY  \"A\" (USD) ACC","LU2361045086.USD":"WELLINGTON US QUALITY GROWTH \"A\" (USD) ACC","BK4501":"段永平概念","BK4554":"元宇宙及AR概念","LU2361044865.SGD":"WELLINGTON US QUALITY GROWTH \"A\" (SGDHDG) ACC","HK0000320223.HKD":"TAIKANG KAITAI CHINA NEW OPPORTUNITIES FUND \"A\" (HKD) ACC","LU2347655156.SGD":"JPMorgan Investment Funds - Global Income A (icdiv) SGD-H","LU0314104364.USD":"MANULIFE GF AMERICAN GROWTH \"AA\" (USD) INC","SG9999014906.USD":"大华全球优质成长基金Acc USD","BK4553":"喜马拉雅资本持仓","BK4585":"ETF&股票定投概念","IE00B775SV38.USD":"NEUBERGER BERMAN US MULTICAP OPPORTUNITIES \"A\" (USD) ACC","BK4507":"流媒体概念","HK0000320264.USD":"TAIKANG KAITAI CHINA NEW OPPORTUNITIES FUND \"A\" (USD) ACC","LU2271345857.HKD":"ALLIANZ GLOBAL SUSTAINABILITY \"AT\" (HKD) ACC","LU1291159041.SGD":"CPR Invest - Global Silver Age A2 Acc SGD-H","LU2592432038.USD":"WELLINGTON MULTI-ASSET HIGH INCOME \"A\" (USD) ACC","LU0314106906.USD":"MANULIFE GF GLOBAL EQUITY \"AA\" (USD) INC","LU0053666078.USD":"摩根大通基金-美国股票A（离岸）美元","LU1582986433.USD":"M&G (LUX) INCOME ALLOCATION \"A-H\" (USDHDG) INC","LU2360106780.USD":"BGF WORLD TECHNOLOGY \"A4\" (USD) INC","LU0795875169.SGD":"JPMorgan Investment Funds - Global Income A (div) SGD-H","LU0082616367.USD":"摩根大通美国科技A（dist）","BK4559":"巴菲特持仓","BK4550":"红杉资本持仓","BK4588":"碎股","LU0949170772.SGD":"Blackrock Global Equity Income A6 SGD-H","IE00BLSP4452.SGD":"Legg Mason ClearBridge - Tactical Dividend Income A Mdis SGD-H Plus","LU2461242641.AUD":"WELLINGTON US QUALITY GROWTH \"A\" (AUDHDG) ACC","LU2083900584.USD":"HSBC GIF US INCOME FOCUSED \"AM2\" (USD) INC","IE0004091025.USD":"BNY MELLON GLOBAL OPPORTUNITIES \"B\" (USD) ACC","LU0265550946.USD":"BGF SYSTEMATIC GLOBAL ENHANCED EQUITY YIELD \"A5\" (USD) INC","LU2242649171.HKD":"FIDELITY FUNDS GLOBAL THEMATIC OPPORTUNITIES \"A\" (HKD) ACC","LU0472753341.HKD":"SUSTAINABLE GLOBAL THEMATIC PORTFOLIO \"A\" (HKD) ACC","LU1127390331.HKD":"AB SICAV I - ALL MARKET INCOME PORTFOLIO \"A\" (HKD) ACC","LU0738911758.USD":"Blackrock Global Equity Income A6 USD","IE00BK4W5L77.USD":"HSBC GLOBAL FUNDS ICAV US EQUITY INDEX \"HC\" (USD) ACC","IE00BK4W5M84.HKD":"HSBC GLOBAL FUNDS ICAV US EQUITY INDEX \"HC\" (HKD) ACC","LU0949170426.SGD":"Blackrock Global Multi-Asset Income A6 SGD-H","AAPL":"苹果","LU2087621335.USD":"ALLSPRING GLOBAL FACTOR ENHANCED EQUITY \"A\" (USD) ACC","IE0004445239.USD":"JANUS HENDERSON US FORTY \"A2\" (USD) ACC","LU0868494617.USD":"UBS (LUX) EQUITY SICAV - US TOTAL YIELD SUSTAINABLE \"P\" (USD) ACC","LU0784384876.USD":"Blackrock Global Multi-Asset Income A6 USD","SGXZ31699556.SGD":"UGDP UNITED GLOBAL QUALITY GROWTH \"C\" (SGDHDG) ACC","IE00BN29S564.USD":"JANUS HENDERSON BALANCED \"A3\" (USD) INC","LU0965508806.USD":"AB LOW VOLATILITY EQUITY PORTFOLIO \"AD\" (USD) INC","LU0511384066.AUD":"SUSTAINABLE GLOBAL THEMATIC PORTFOLIO \"A\" (AUDHDG) ACC","BK4533":"AQR资本管理(全球第二大对冲基金)","LU2028103732.USD":"ALLIANZ GLOBAL SUSTAINABILITY \"AMG\" (USD) INC","LU2065170008.USD":"M&G (LUX) GLOBAL MAXIMA \"A\" (USD) INC","LU0528227936.USD":"富达环球人口趋势基金A-ACC","LU2357305700.SGD":"Allianz Global Artificial Intelligence ET H2-SGD","LU0661504455.SGD":"Blackrock Global Equity Income A5 SGD-H","LU1366192091.USD":"ALLIANZ US EQUITY PLUS \"AM\" (USD) INC","BK4534":"瑞士信贷持仓","LU1582987324.SGD":"M&G (LUX) INCOME ALLOCATION \"A-H\" (SGDHDG) ACC","BK4532":"文艺复兴科技持仓","LU1582987597.SGD":"M&G (LUX) INCOME ALLOCATION \"A-H\" (SGDHDG) INC","GB00BDT5M118.USD":"天利环球扩展Alpha基金A Acc","BK4527":"明星科技股","LU0640476718.USD":"THREADNEEDLE (LUX) US CONTRARIAN CORE EQ \"AU\" (USD) ACC","IE0001KFT4U8.USD":"FTGF CLEARBRIDGE GLOBAL GROWTH LEADERS \"A\" (USD) INC","LU0466842654.USD":"HSBC ISLAMIC GLOBAL EQUITY INDEX \"A\" (USD) ACC","LU0048584097.USD":"FIDELITY FUNDS  GLOBAL THEMATIC OPPORTUNITIES \"A\" (USD) INC","IE0009G5SDU7.USD":"PIMCO BALANCED INCOME AND GROWTH \"M\" (USD) INC","IE00B1XK9C88.USD":"PINEBRIDGE US LARGE CAP RESEARCH ENHANCED \"A\" (USD) ACC","LU2089284900.SGD":"Allianz Global Sustainability Cl AM Dis H2-SGD","IE000ITXATA3.USD":"PIMCO BALANCED INCOME AND GROWTH \"M\" (USD) ACC","IE000YTNTUN2.SGD":"PIMCO BALANCED INCOME AND GROWTH \"M\" (SGDHDG)INC","LU0456855351.SGD":"JPMorgan Funds - Global Equity A (acc) SGD","LU2191332357.HKD":"SCHRODER ISF SUSTAINABLE MULTI-ASSET INCOME \"A\" (HKDHDG) INC","LU2602419157.SGD":"HSBC ISLAMIC GLOBAL EQUITY INDEX \"AC\" (SGD) ACC","LU1145028129.USD":"ALLIANZ INCOME AND GROWTH \"AQ\" (USD) INC","LU1496350171.SGD":"FRANKLIN DIVERSIFIED BALANCED \"A\" (SGDHDG) ACC","LU0719512351.SGD":"JPMorgan Funds - US Technology A (acc) SGD","LU0320765059.SGD":"FTIF - Franklin US Opportunities A Acc SGD","LU2023250843.SGD":"Allianz Thematica Cl AT Acc H2-SGD","LU2420271590.USD":"ALLIANZ SELECT INCOME AND GROWTH \"AT\" (USD) ACC","LU0157215616.USD":"FIDELITY GLOBAL FOCUS \"A\" INC","LU2065171311.SGD":"M&G (LUX) GLOBAL MAXIMA \"A\" (SGD) ACC","LU0096362180.USD":"CT (LUX) I GLOBAL FOCUS \"DU\" (USD)","LU2065171402.SGD":"M&G (LUX) GLOBAL MAXIMA \"A\" (SGD) INC","LU1839511570.USD":"WELLS FARGO GLOBAL FACTOR ENHANCED EQUITY \"I\" (USD) ACC","LU2543165471.USD":"E FUND (HK) GLOBAL QUALITY GROWTH \"A\" (USD) ACC","LU0353189763.USD":"ALLSPRING  US ALL CAP GROWTH FUND \"I\" (USD) ACC","LU2471134952.CNY":"INVESCO GLOBAL EQUITY INCOME ADVANTAGE \"A\" (CNYHDG) INC","LU2471134879.HKD":"INVESCO GLOBAL EQUITY INCOME ADVANTAGE \"A\" (HKD) INC","LU0795875086.SGD":"JPMorgan Investment Funds - Global Income A (div) SGD","LU2471134523.USD":"INVESCO GLOBAL EQUITY INCOME ADVANTAGE \"A\" (USD) ACC","LU0096364046.USD":"CT (LUX) I AMERICAN \"DU\" (USD) ACC","IE0003U64NQ7.SGD":"PIMCO BALANCED INCOME AND GROWTH \"M\" (SGDHDG) ACC","LU2471134796.USD":"INVESCO GLOBAL EQUITY INCOME ADVANTAGE \"A\" (USD) INC","LU0943347566.SGD":"安联收益及增长平衡基金AM H2-SGD","IE00BFSS7M15.SGD":"Janus Henderson Balanced A Acc SGD-H","LU2750360641.GBP":"INVESCO GLOBAL EQUITY INCOME ADVANTAGE \"A\" (GBPHDG) INC","LU0109392836.USD":"富兰克林科技股A","LU0820562030.AUD":"ALLIANZ INCOME AND GROWTH \"AMH2\" (AUDHDG) H2 INC","IE000KEQY171.SGD":"PIMCO BALANCED INCOME AND GROWTH \"M\" (SGDHDG) INC","SG9999015945.SGD":"LionGlobal Disruptive Innovation Fund A SGD","LU0965509010.AUD":"AB LOW VOLATILITY EQUITY PORTFOLIO \"AD\" (AUDHDG) INC","LU2750360997.AUD":"INVESCO GLOBAL EQUITY INCOME ADVANTAGE \"A\" (AUDHDG) INC","LU1571399168.USD":"ALLSPRING GLOBAL LONG/SHORT EQUITY \"IP\" (USD) ACC","LU1084165304.USD":"FIDELITY WORLD \"A\" (USD) ACC","SG9999014898.SGD":"United Global Quality Growth Fund Dis SGD","LU2089283258.USD":"安联环球可持续基金Cl AM Dis","LU0787776722.HKD":"AB SELECT US EQUITY PORTFOLIO \"A\" (HKD) ACC","LU0444971666.USD":"天利全球科技基金","LU0912757837.SGD":"JPMorgan Investment Funds - Global Income A (mth) SGD-H","LU2106854487.HKD":"ALLIANZ THEMATICA \"AMG\" (HKD) INC","LU2168564495.EUR":"AZ ALLOCATION - TREND \"AI\" (EUR) ACC","LU0889565833.HKD":"FRANKLIN TECHNOLOGY \"A\" (HKD) ACC","LU0965509101.SGD":"AB LOW VOLATILITY EQUITY PORTFOLIO \"A\" (SGDHDG) ACC","LU2168564222.USD":"AZ ALLOCATION - TREND \"AAZ\" (USDHDG) ACC","LU0689626769.HKD":"AB SICAV I - SUSTAINABLE US THEMATIC PORTFOLIO \"A\" (HKD) ACC","IE00B3SWFQ91.USD":"PIMCO BALANCED INCOME AND GROWTH \"E\" (USD) INC","LU2168564065.EUR":"AZ ALLOCATION - TREND \"AAZ\" (EUR) ACC","LU2168563687.JPY":"AZ ALLOCATION - TREND \"AAZ\" (JPYHDG) ACC","LU1778281490.HKD":"HSBC GIF GLOBAL LOWER CARBON EQUITY \"AD\" (HKD) INC","LU2168564149.EUR":"AZ ALLOCATION - TREND \"BAZ\" (EUR) ACC","IE00BZ1G4Q59.USD":"LEGG MASON CLEARBRIDGE US EQUITY SUSTAINABILITY LEADER \"A\"(USD) INC (A)","IE000W1ABFV2.USD":"PIMCO BALANCED INCOME AND GROWTH \"R\" (USD) INC","MACW.SI":"APPLE 3xLongSG261006","LU0077335932.USD":"FIDELITY AMERICAN GROWTH \"A\" INC","LU0476273544.USD":"CT (LUX) I GLOBAL TECHNOLOGY \"BU\" (USD) ACC","LU0348723411.USD":"ALLIANZ GLOBAL HI-TECH GROWTH \"A\" (USD) INC","LU0353189680.USD":"富国美国全盘成长基金Cl A Acc","LU2023250330.USD":"ALLIANZ INCOME AND GROWTH \"AMG\" (USD) INC","LU0345768740.USD":"NINETY ONE GSF GLOBAL STRATEGIC MANAGED \"A\" (USD) INC","LU0158827781.USD":" ALLIANZ GLOBAL SUSTAINABILITY \"AT\" (USD) ACC","LU2242650005.HKD":"FIDELITY FUNDS GLOBAL MULTI ASSET DYNAMIC \"A\" (HKD) ACC","IE00BN8TJ469.HKD":"FTGF CLEARBRIDGE TACTICAL DIVIDEND INCOME \"A\" (HKD) INC","SG9999015978.USD":"利安颠覆性创新基金A","LU1642822529.SGD":"THREADNEEDLE (LUX) GLOBAL TECHNOLOGY \"A\" (SGD) ACC","LU1989771016.USD":"东方汇理环球老龄化投资基金 A2 Acc","HK0000306685.HKD":"TAIKANG KAITAI CHINA NEW OPPORTUNITIES FUND \"A\" (HKD) INC","LU2108987350.USD":"UBS (LUX) EQUITY SICAV GLOBAL OPPORTUNITY SUSTAINABLE (USD) \"P\" (USD) ACC","LU0345770993.USD":"NINETY ONE GSF GLOBAL STRATEGIC EQUITY \"A\" (USD) INC","LU1989772840.SGD":"CPR Invest - Climate Action A2 Acc SGD-H","LU2237443895.HKD":"abrdn SICAV I -  GLOBAL DYNAMIC DIVIDEND \"A\" (HKD) ACC","LU0784383803.USD":"BGF GLOBAL MULTI-ASSET INCOME FUND \"A\" (USD) INC A","LU1989772923.USD":"CPR Invest - Climate Action A2 Acc USD-H","LU1066051498.USD":"HSBC GIF GLOBAL EQUITY VOLATILITY FOCUSED \"AM2\" (USD) INC","LU0345769631.USD":"NINETY ONE GSF GLOBAL EQUITY \"A\" (USD) INC","LU1934455277.USD":"AB SICAV I LOW VOLATILITY TOTAL RETURN EQUITY PORT \"AD\" (USD) INC","LU1989764664.SGD":"CPR Invest - Global Disruptive Opportunities A2 Acc SGD-H","LU1815336760.USD":"THREADNEEDLE (LUX) GLOBAL TECHNOLOGY \"AUP\" (USD) INC","LU0323591593.USD":"SCHRODER ISF QEP GLOBAL QUALITY \"A\" (USD) ACC","LU1989764748.USD":"东方汇理环球颠覆性机遇A2 Acc","HK0000306701.USD":"TAIKANG KAITAI CHINA NEW OPPORTUNITIES FUND \"A\" (USD) INC","LU0820561909.HKD":"ALLIANZ INCOME AND GROWTH \"AM\" (HKD) INC","SG9999014575.USD":"UOB UNITED INCOME FOCUS TRUST FUND (USDHDG) INC","LU0345769128.USD":"NINETY ONE GSF GLOBAL EQUITY \"A\" (USD) ACC","LU1119994496.HKD":"FIDELITY WORLD \"A\" (HKD) ACC","LU1934455194.USD":"AB SICAV I LOW VOLATILITY TOTAL RETURN EQUITY PORT \"A\" (USD) ACC","LU1116320737.USD":"BGF SYSTEMATIC GLOBAL ENHANCED EQUITY YIELD \"A6\" (USD) INC","IE00B19Z8W00.USD":"FTGF CLEARBRIDGE US LARGE CAP GROWTH \"A\" INC","IE0034235303.USD":"PINEBRIDGE US RESEARCH ENHANCED CORE EQUITY \"A\" (USD) ACC","LU0256863902.USD":"ALLIANZ US EQUITY \"AT\" (USD) ACC","LU0256863811.USD":"ALLIANZ US EQUITY \"A\" INC","LU0689472784.USD":"安联收益及增长基金Cl AM AT Acc","LU1116320901.HKD":"BGF SYSTEMATIC GLOBAL ENHANCED EQUITY YIELD \"A6\" (HKD) INC","IE00BKDWB100.SGD":"PINEBRIDGE US LARGE CAP RESEARCH ENHANCED \"A5H\" (SGDHDG) ACC","LU2111349929.HKD":"ALLIANZ GLOBAL SUSTAINABILITY \"AM\" (HKD) INC","SG9999014559.SGD":"United Income Focus Trust Dis SGD","IE0005OL40V9.USD":"JANUS HENDERSON BALANCED \"A6M\" (USD) INC","LU1232071149.USD":"AZ FUND 1 GLOBAL GROWTH SELECTOR \"AAZ\" (USDHDG) ACC","LU2236285917.USD":"ALLIANZ GLOBAL INCOME \"AMG\" (USD) INC","SG9999014567.USD":"UOB UNITED INCOME FOCUS TRUST FUND (USD) ACC","IE00BJLML261.HKD":"HSBC GLOBAL EQUITY INDEX \"HCH\" (HKD) ACC","LU2250418816.HKD":"BGF WORLD TECHNOLOGY \"A\" (HKD) ACC","LU0061475181.USD":"THREADNEEDLE (LUX) AMERICAN \"AU\" (USD) ACC","LU1301847155.USD":"BGF GLOBAL MULTI-ASSET INCOME FUND \"A4G\" (USD) INC","SG9999015358.SGD":"United Income Focus Trust Dis SGD-H","LU0316494557.USD":"FRANKLIN GLOBAL FUNDAMENTAL STRATEGIES \"A\" ACC","LU0942090050.USD":"UBS (LUX) EQUITY SICAV - US TOTAL YIELD SUSTAINABLE \"P\" (USD)  INC","LU0820561818.USD":"安联收益及增长平衡基金Cl AM DIS","LU0708995401.HKD":"FRANKLIN U.S. OPPORTUNITIES \"A\" (HKD) ACC","LU2054465674.USD":"UBS (LUX) KEY SELEC SICAV DIGITAL TRANSFORMATION T \"P\" (USD) ACC","LU2403377893.USD":"ALLIANZ SELECT INCOME AND GROWTH \"AM\" (USD) INC","LU2286300806.USD":"Allianz Cyber Security AT Acc USD","LU1235294995.USD":"FIDELITY GLOBAL TECHNOLOGY \"A\" (USDHDG) ACC","LU0154236417.USD":"BGF US FLEXIBLE EQUITY \"A2\" ACC","LU1551013342.USD":"Allianz Income and Growth Cl AMg2 DIS USD","LU2381873111.SGD":"BGF SYSTEMATIC GLOBAL EQUITY HIGH INCOME \"A6\" (SGDHDG) INC","LU0289739343.SGD":"SUSTAINABLE GLOBAL THEMATIC PORTFOLIO \"A\" (SGD) ACC","IE00B7KXQ091.USD":"Janus Henderson Balanced A Inc USD","LU0957808578.USD":"THREADNEEDLE (LUX) GLOBAL TECHNOLOGY \"ZU\" (USD) ACC","LU1069344957.HKD":"AB SICAV I - AMERICAN GROWTH PORTFOLIO \"AD\" (HKD) INC","LU1244550577.SGD":"FTIF - Franklin Global Multi-Asset Income A (Mdis) SGD-H1","IE00B19Z9505.USD":"美盛-美国大盘成长股A Acc","BK4592":"伊斯兰概念","LU1868837300.USD":"CT (LUX) I AMERICAN FUND \"9\" (USD) ACC","IE00BLSP4239.USD":"Legg Mason ClearBridge - Tactical Dividend Income A Mdis USD Plus","LU0683600562.USD":"AB SELECT US EQUITY \"A\" (USD) ACC","LU2087625088.SGD":"ALLSPRING  US ALL CAP GROWTH \"A\" (SGDHDG) ACC","LU0061474960.USD":"天利环球焦点基金AU Acc","LU1868836914.USD":"CT (LUX) I AMERICAN \"3\" (USD) ACC","LU1548497426.USD":"安联环球人工智能AT Acc","LU1868837136.USD":"CT (LUX) I AMERICAN \"8\" (USD) ACC","LU0964807845.USD":"ALLIANZ INCOME & GROWTH \"A\" (USD) INC","LU1868836591.USD":"CT (LUX) I AMERICAN \"1U\"(USD) ACC","LU2756315664.SGD":"ALLIANZ INCOME AND GROWTH \"AMI\" (SGDHDG) INC","LU0957791311.USD":"THREADNEEDLE (LUX) GLOBAL FOCUS \"ZU\" (USD) ACC","LU1815333072.USD":"THREADNEEDLE (LUX) GLOBAL FOCUS \"AUP\" (USD) INC","LU1868836757.USD":"CT (LUX) I AMERICAN FUND \"2\" (USD) ACC","LU1316542783.SGD":"Janus Henderson Horizon Global Technology Leaders A2 SGD","LU1935043023.USD":"MANULIFE GF GLOBAL MULTI-ASSET DIVERSIFIED INCOME \"AA\" (USD) INC A","IE00B4JS1V06.HKD":"JANUS HENDERSON BALANCED \"A2\" (HKD) ACC","LU1242518857.USD":"FULLERTON LUX FUNDS - ASIA ABSOLUTE ALPHA \"I\" (USD) ACC","IE00BBT3K403.USD":"LEGG MASON CLEARBRIDGE TACTICAL DIVIDEND INCOME \"A(USD) ACC","LU0553294199.USD":"BGF GLOBAL EQUITY INCOME \"A5G\" (USD) INC","LU2746668461.USD":"MANULIFE DYNAMIC LEADERS \"AA\" (USD) ACC","IE00B5949003.HKD":"JANUS HENDERSON GLOBAL TECHNOLOGY AND INNOVATION \"A\" (HKD) ACC","LU0642271901.SGD":"Janus Henderson Horizon Global Technology Leaders A2 SGD-H","LU1066051225.USD":"HSBC GIF GLOBAL EQUITY VOLATILITY FOCUSED \"AC\" (USD) ACC","LU1551013425.SGD":"Allianz Income and Growth Cl AMg2 DIS H2-SGD","LU2756315318.SGD":"ALLIANZ INCOME AND GROWTH \"AMG\" (SGDHDG) INC A","LU1803068979.SGD":"FTIF - Franklin Technology A (acc) SGD-H1","LU1035775433.USD":"AB SICAV I - AMERICAN GROWTH PORTFOLIO \"AD\" (USD) INC","SG9999017495.SGD":"UGDP UNITED GLOBAL QUALITY GROWTH \"B\" (SGD) ACC","LU0251132253.USD":"FIDELITY FUNDS  GLOBAL THEMATIC OPPORTUNITIES \"A\" (USD) ACC","LU2746668974.SGD":"MANULIFE DYNAMIC LEADERS \"AA\" (SGDHDG) ACC","SG9999014914.USD":"UNITED GLOBAL QUALITY GROWTH (USDHDG) INC","LU1003077747.HKD":"BGF GLOBAL EQUITY INCOME \"A6\" (HKDHDG) INC","SG9999002232.USD":"Allianz Global High Payout USD","BK4598":"佩洛西持仓","IE00BJJMRX11.SGD":"Janus Henderson Balanced A Acc SGD","LU0417517546.SGD":"Allianz US Equity Cl AT Acc SGD","SG9999002224.SGD":"Allianz Global High Payout SGD","SG9999015341.SGD":"United Income Focus Trust Acc SGD-H","LU0079474960.USD":"联博美国增长基金A","LU1934455863.HKD":"AB SICAV I LOW VOLATILITY TOTAL RETURN EQUITY PORT \"A\" (HKD) ACC","LU1066051811.HKD":"HSBC GIF GLOBAL EQUITY VOLATILITY FOCUSED \"AM2\" (HKD) INC","LU2360032135.SGD":"ALLSPRING GLOBAL EQUITY ENHANCED INCOME \"A\" (SGDHDG) INC","LU1244550494.USD":"FRANKLIN GLOBAL MULTI-ASSET INCOME \"A\" (USDHEDGED) ACC","LU2462157665.USD":"ALLIANZ GLOBAL INCOME \"A\" (USD) INC","SG9999014880.SGD":"大华全球优质成长基金Acc SGD","LU2417539215.USD":"ALLIANZ GLOBAL INCOME \"AMF\" (USD) INC","LU1974910355.USD":"Allianz Thematica Cl AMg DIS USD","LU1046421795.USD":"富达环球科技A-ACC","IE00BFSS8Q28.SGD":"Janus Henderson Balanced A Inc SGD-H","LU2125154935.USD":"ALLSPRING (LUX) WF GLOBAL EQUITY ENHANCED INCOME \"I\" (USD) INC","IE00B775H168.HKD":"JANUS HENDERSON BALANCED \"A5M\" (HKD) INC","LU2237443382.USD":"Aberdeen Standard SICAV I - Global Dynamic Dividend A MIncA USD","IE0004445015.USD":"JANUS HENDERSON BALANCED \"A2\" (USD) ACC","LU1366333091.USD":"FIDELITY GLOBAL FOCUS \"A\" (USD) ACC","LU0124676726.USD":"AB SICAV I - SUSTAINABLE US THEMATIC PORTFOLIO \"A\" (USD) ACC","LU2237443549.SGD":"Aberdeen Standard SICAV I - Global Dynamic Dividend A MIncA SGD-H","LU1066053197.SGD":"HSBC GIF GLOBAL EQUITY VOLATILITY FOCUSED \"AM3\" (SGDHDG) INC","LU2237443622.USD":"Aberdeen Standard SICAV I - Global Dynamic Dividend A Acc USD","LU0979878070.USD":"FULLERTON LUX FUNDS - ASIA ABSOLUTE ALPHA \"A\" (USD) ACC","LU2237443978.SGD":"Aberdeen Standard SICAV I - Global Dynamic Dividend A Acc SGD-H","IE0004086264.USD":"BNY MELLON GLOBAL OPPORTUNITIES \"A\" (USD) ACC","LU2247934214.USD":"FIDELITY FUNDS SUSTAINABLE FUTURE CONNECTIVITY \"A\" (USD) ACC","LU0289961442.SGD":"SUSTAINABLE GLOBAL THEMATIC PORTFOLIO \"AX\" (SGD) ACC","LU0985320562.USD":"NORDEA 1 GLOBAL STARS EQUITY \"BP\" (USD) ACC","LU1267930730.SGD":"富兰克林美国机遇基金AS Acc SGD (CPF)","LU0109391861.USD":"富兰克林美国机遇基金A Acc","LU0238689110.USD":"贝莱德环球动力股票基金","LU0072462426.USD":"贝莱德全球配置 A2","LU0545039389.USD":"BGF GLOBAL EQUITY INCOME \"A2\" ACC","LU0011850046.USD":"贝莱德全球长线股票 A2 USD","LU0097036916.USD":"贝莱德美国增长A2 USD","BK4571":"数字音乐概念","LU2860962120.EUR":"CPR INVEST - ARTIFICIAL INTELLIGENCE \"A2\" (EUR) ACC A","LU0308772762.SGD":"Blackrock Global Allocation A2 SGD-H","LU1280957306.USD":"THREADNEEDLE (LUX) US CONTRARIAN CORE EQUITIES \"AUP\" (USD) INC","BK4576":"AR","BK4575":"芯片概念","LU2237438978.USD":"Amundi Funds US Pioneer A2 (C) USD","LU0444973449.USD":"CT (LUX) I GLOBAL TECHNOLOGY \"DU\" (USD) ACC"},"translate_title":"Apple Authentication Abused: Hackers Use Real Certificates to Give macOS Malware a Legal Coat","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"AAPL":1.86,"MACW.SI":0.6},"content_text":"IT之家 12 月 30 日消息，过去很多人认为 macOS 较为安全，其实原因是 macOS 用户基数较小，黑客兴趣不大，但随着 Mac 市占率持续增长，恶意软件问题亦愈趋严重。Jamf 威胁实验室 12 月 22 日就披露了一种最新的 macOS 恶意软件。苹果 Mac App Store 之外的应用程序必须经过加密签名和认证，但 Jamf 指出 —— 黑客正在通过地下渠道购买或窃取真实的开发者 ID 证书。这些恶意软件因拥有苹果的“公证证书”，在安装时看起来与合法软件毫无二致，所以能完美躲过苹果安全审查。此外，恶意代码往往被封装在看似无害的 Swift 执行文件中，在苹果的静态分析中，它们几乎不执行任何操作，完美避开审核。Jamf 批评苹果的认证流程过于死板，黑客提交审核时提供的是“干净”内容，但一旦程序在用户电脑上运行并连接网络，它才会从云端下载并加载真正的恶意代码。Jamf 安全研究人员在对内部 YARA 规则命中样本进行分析时，发现了一种与以往不同的 macOS “木马”型恶意软件。据介绍，该样本在整体行为上与近年来活动频繁的 MacSync Stealer 家族高度相似，但在投递和执行方式上进行了明显调整。研究人员确认，该样本为一款已经完成代码签名并通过 Apple 公证的窃密程序，其执行链条并未遵循此前常见模式。据介绍，早期的 MacSync Stealer 主要依赖“拖拽到终端”或 ClickFix 风格的社工手段，诱导用户主动在终端中执行脚本；而此次发现的样本则采用了一种更加隐蔽、自动化程度更高的新方式。该恶意程序被打包为一个经过代码签名并完成公证的 Swift 应用，包含在名为“zk-call-messenger-installer-3.9.2-lts.dmg”的磁盘映像中，并通过 https://zkcall.net/ download 分发。与以往不同的是，该样本不再要求用户进行任何直接的终端操作，而是通过 Swift 构建的辅助可执行文件，从远程服务器获取并执行一个经过编码的脚本。Jamf 还观察到，另一款名为 Odyssey 的同类程序最新变种也采用了类似的分发方式。值得注意的是，尽管该可执行文件已经完成签名且不需要额外授权步骤，样本中仍然保留了常见的“右键打开”提示。在对 Mach-O 二进制文件进行分析后，研究人员确认该程序为通用架构构建，并已完成代码签名和公证，其签名关联的开发者团队 ID 为 GNJLS3UYZ4。同时，Jamf 将代码目录哈希值与苹果的吊销列表进行了比对，在分析时并未发现相关证书被吊销。安全研究人员注意到，该磁盘映像体积异常偏大，达到 25.5MB。分析显示，其体积很可能是由于在应用包中嵌入了用于掩护的诱饵文件所致，其中包括与 LibreOffice 应用相关的 PDF 文档。在 VirusTotal 平台上，不同样本的检测结果差异较大，有的仅被一个杀毒引擎识别，有的则被多达十三个引擎标记。多数安全引擎将其归类为与 coins 或 ooiid 恶意软件家族相关的通用下载器。在确认该开发者团队 ID 被用于分发恶意载荷后，Jamf 已将相关信息上报 Apple，随后对应证书已被撤销。在初始检测阶段，Jamf Threat Labs 指出，MacSync Stealer 的大多数载荷通常以内存执行为主，几乎从不在磁盘上留下痕迹。早期版本往往会被 Jamf 的高级威胁防护机制拦截，因为这些版本通常依赖将脚本文件拖入终端执行，或通过 ClickFix 技术诱导用户粘贴一段 base64 编码命令。在这些场景中，载荷会通过 base64 -D 解码、使用 gunzip 解压，存入变量并通过 eval 执行，随后再通过 curl 获取第二阶段载荷。然而，此次样本的异常之处在于，其触发告警的原因并非上述流程，而是一条用于监控混淆 Bash 脚本执行的威胁防护规则。相关事件显示，一个位于 /tmp/ runner 的 shell 脚本正在运行，这一行为引起了研究人员的警觉。安全人员进一步检查后发现，该脚本的执行进程来自一个已签名的应用程序，且应用路径显示其直接从已挂载的磁盘映像中运行。对 /tmp/ runner 脚本的分析表明，这正是此前在 MacSync Stealer 攻击活动中出现过的同一脚本，只是在早期版本中通常不会被写入磁盘。解码后的 base64 载荷与常见的 MacSync Stealer 完全一致，使用了此前已出现过的 focusgroovy [.]com 域名，并包含相同的 daemon_function ()。▲ 应用路径详情Jamf 随后对应用包内的 Swift Mach-O 可执行文件进行了分析。该文件的 _main 函数作为入口点，用于初始化应用状态和日志路径，执行基础的网络连接检查，并在确认网络可用后获取第二阶段载荷。程序解析用户主目录后，会在~/Library/ Logs / UserSyncWorker.log 创建日志文件，并在~/Library/ Application Support / UserSyncWorker/ 目录中维护 last_up 和 gate 等文件，用于记录执行时间和更新状态。相关文件仅在此前不存在时创建。▲ 混淆后的有效载荷日志中会记录程序启动信息，并设置约 3600 秒的最小执行间隔，以防止短时间内重复运行。随后，程序调用 checkInternet () 进行网络连通性检测，仅在确认联网后才会继续执行 runInstaller ()。如果网络不可用，则会记录“preflight: internet=false”，并通过 _exit (1) 正常退出。▲ 解码后的有效载荷runInstaller () 函数承担了完整的第二阶段载荷下载与执行逻辑。该函数首先读取~/Library/ Application Support / UserSyncWorker / last_up 中保存的时间戳，以实现执行频率限制。如果距离上次执行不足约 3600 秒，程序会记录相关日志并直接退出。在满足条件后，程序再次检测网络状态，并清理 /tmp 目录中此前遗留的文件，例如 /tmp/ runner。▲ Mach-O 二进制文件中的 _main 函数随后，程序通过 /bin/ zsh -lc 调用 curl，向一地址发起请求，并使用特定的 User-Agent (macOS)。下载的载荷被写入 /tmp/ runner，请求头信息则保存至 /tmp/ runner.headers。与以往变种相比，该 curl 命令在参数上有所变化，例如将常见的 -fsSL 拆分为 -fL 与 -sS，并新增了 --noproxy 选项。这些变化被认为旨在提升稳定性或规避检测。▲ HTTP 请求在执行载荷前，程序会移除 com.apple.quarantine 属性，并将文件权限设置为 750。随后，通过 /usr/ bin / file 检查其 MIME 类型是否为 text/x-shellscript，并验证其输出是否包含预期的脚本描述信息，以确认其为 zsh 脚本。同时，程序还会调用 spctl -a -v 执行 Gatekeeper 检查，确保下载文件能够通过苹果的安全检查。▲ 用于检索有效载荷的 Curl 命令载荷执行完成后，/tmp/ runner 文件即被删除，并将当前时间戳写回~/Library/ Application Support / UserSyncWorker / last_update，以继续实施最小执行间隔控制。Jamf 认为，该 runInstaller () 函数构建了一个分层、具备状态感知且具备规避能力的投递流程，通过环境检测、频率限制、网络请求、Gatekeeper 绕过与轻量级校验相结合，并整体封装在原生 Swift 可执行文件中。一旦载荷执行完成，系统中会出现常见的 osascript 对话框，并伴随其他与 MacStealer 活动相关的行为。Jamf 指出，尽管 MacSync Stealer 本身并非新出现的威胁，但此次案例显示其作者仍在持续演进其投递方式。研究人员此前尚未观察到这种以 Swift 编写、完成代码签名和公证、并能够静默获取和执行第二阶段载荷的投递程序。该变化反映了 macOS 恶意软件生态中的一个更广泛趋势，即攻击者正试图将恶意程序伪装成已签名、公证的合法应用，从而降低早期被发现的风险。","kind":"news","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":false,"tenantId":"TBCN","deviceId":"web-server-community-laohu8-v3","version":"4.42.0","shortVersion":"4.42.0","platform":"web","vendor":"web","appName":"laohu8","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2595549767","isCrawlerRequest":true}