Malware alert: New Cuckoo malware impacting Intel and Arm-based MacBooks

Apple MacBook users, here’s an important warning for you. Cybersecurity researchers have discovered a new malware which can steal your data. Dubbed Cuckoo, the malware can impact both Intel and Arm-based Macs. According to The Hacker News, the malware has been discovered by device management Kandji.

What is worrying about Cuckoo malware is that it can also double up as a spyware, and affect old as well as new Macs.

How does Cuckoo malware on MacOS target devices?

The malware is hosted by websites like dumpmedia.com that allow users to download music from streaming apps like Spotify for free by converting it into MP3 format. The website also mentions tunesolo.com, fonedog.com, tunesfun.com, and tunefab.com in the list of websites that act as a targeted source of malware.


Once a user downloads DumpMedia Spotify Music Converter or any other music converter app, the malware asks the user to ‘Open’ it by right-clicking on the file which is not required for a macOS app.

Further, the app lacks a developer ID. While the system tries to stop the program because of the absence of developer ID, users are tempted enough to manually bypass the security.

After installing the app, the malware displays a fake password prompt to steal the user's password. Once a user submits his system password, the malware gives hackers access to user details and steals their data without their knowing.

How to stay safe?

As the malware is distributed by websites promising pirated music, it is advisable to refrain from visiting or downloading apps from unverified websites.