Please let us know if you have any follow-up questions or concerns about Silver Sparrow, malware, or the Checks feature of Kolide. Based on the information we have today, it appears no Kolide customers have been infected by this malware.Įven so, out of an abundance of caution, Kolide has developed a simple Checkto look for this malware and deployed it to each of our customers. While Kolide isn’t intended to be used as a comprehensive malware detection platform, we often as a courtesy hunt for prolific threats on behalf of our customers. the answer to the question is, use About this Mac, look to see if you have an M1 chip. This Malware is already well-detected by commodity anti-virus solutions, and Apple has done its part to help stop the spread by revoking the development certificate used to sign the malicious installer. announced earlier this month that two of its detection engineers had made an unusual discovery: a strain of macOS malware using a LaunchAgent to establish. It is also one of the first variants of Mac malware in the wild that was compiled to run natively on Macs with Apple Silicon. What makes Silver Sparrow so interesting is that while the malware had the capability to do real damage, its final payload was never executed by its authors and operators.

They posted a detailed analysis online and dubbed this new threat Silver Sparrow.

On February 18th, Red Canary working with MalwareBytes broke the news that they had discovered a latent malware infection is as many as 30,000 Macs.

Silver sparrow malware how to detect