macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox (opens in new tab)
DPRK-linked implant embeds 38 fabricated system messages that spoof an LLM triage harness, hiding a credential stealer and Telegram C2 underneath.
Read the original article