Janicab

Janicab is a malicious software (malware) that has been utilized by the hack-for-hire group known as Deathstalker. This malware, which can infiltrate systems through suspicious downloads, emails, or websites, has the potential to steal personal information, disrupt operations, and even hold data hostage for ransom. The discovery of Janicab was announced by F-Secure, who identified it as a new trojan. Throughout 2020, and possibly into 2021, the Deathstalker group exploited a new variant of Janicab to target legal entities in the Middle East. This variant was uncovered by Kaspersky while investigating less common Deathstalker intrusions. Notably, this variant was used repeatedly in different campaigns, indicating its effectiveness and adaptability. Despite the threat posed by Janicab, it remains undetected by most anti-virus software and can bypass the built-in defenses of Mac OS X, especially if the user is unobservant or lacks technical savvy. This makes Janicab a significant cybersecurity concern, particularly for legal entities operating in the Middle East, and underscores the need for robust, updated security measures to mitigate such threats.