Malware
Gaslight
- First Reported
- Jun 25, 2026
- Latest Reported
- Nov 4, 2026
Reported Context (3)
- already held it (SHA-256 3c254614de8c1a2f...), classified malicious under the name MacOS.Trojan.Gaslight, flagged by 10 of 24 scanners and first seen at 01:17:59 UTC on July 23, 2026, inside the same TraderTraitor Toolkit Analysis Finds Earlier Malware, but Binance Link Remains Unconfirmed
- More recently, macOS malware dubbed Gaslight embedded fake system-failure messages inside its binary, aimed at a different AI reader, trying to talk AI-assisted malware analysis tools into aborting their own analysis. Ghostcommit Hides Instructions in PNGs to Trick AI Agents Into Exposing Repository Secrets
- A newly discovered macOS malware called Gaslight uses fake logs, crash reports, and prompt injection strings to confuse AI-assisted malware analysis tools during triage. Gaslight macOS Malware Uses Fake Errors to Confuse AI Analysis Tools
Malware (3)
People (5)
Threat Actors (2)
MITRE ATT&CK (14)
Vendors (6)
Products (17)
Tools (3)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.