X2441139MAC ? What is it

[mac202330202]

Noticed a folder on my M1 X2441139MAC
/Library/X2441139MAC/Temp/:.

System was cloned over from PreM1 mac previously.

 

[bogdanw]

Noticed a folder on my M1 X2441139MAC
/Library/X2441139MAC/Temp/:.

System was cloned over from PreM1 mac previously.

"Windows Malware Runs on Macs, Bypasses Gatekeeper to Target Software Pirates"
https://www.bleepingcomputer.com/ne...passes-gatekeeper-to-target-software-pirates/
"Next, it grabs the following files, stores them into ~/Library/X2441139MAC/Temp/, mounts them as DMG images, and executes the binaries contained within:"

 

[mac202330202]

I did see a couple of articles ref that, but wasn't from really recognised sites.

Question is, has it been able to take screenshots, copy and paste or access file storage.

 

[bogdanw]

The infection took place on your previous Mac. It’s unlikely that the current one is infected, as XProtect would most likely block that malware.
To scan for malware, free in the App Store
Intego VirusBarrier Scanner https://apps.apple.com/app/intego-virusbarrier-scanner/id1200445649
Bitdefender Virus Scanner https://apps.apple.com/app/bitdefender-virus-scanner/id500154009

 

[mac202330202]

I did have a look - couldn't find something called Mono.. seems thats essential.

192:Sites $ mono -V

-bash: mono: command not found

192:Sites $ mono --version

-bash: mono: command not found

192:Sites $ mono -V

-bash: mono: command not found

192:Sites i$ port contents mono Copy

-bash: port: command not found

 

[mac202330202]

On scanning i have a few malewarebytes, cleanmymac etc none picked up anything