North Korea Is Recycling Mac Malware. That's Not the Worst Part

The Lazarus Group has used a loader against macOS whose code came from a Cylance research blog post and open-source GitHub project. The loader runs encrypted second-stage malware directly in computer memory, leaving few or no installation traces on the hard drive.