Janicab

ATP Sandbox Adv. HeuristicsAV

Description

Janicab is an OS X trojan that relied on a valid developer ID and inattentive users to install.

Stats

First seen: April 2022
Last seen: October 2026

MITRE ATT&CK techniques

4 techniques across 3 tactics.

TA0002 Execution

T1053Scheduled Task/Job
- T1053.003Cron

TA0009 Collection

T1113Screen Capture
T1123Audio Capture

TA0112 Defense Impairment

T1553Subvert Trust Controls
- T1553.002Code Signing

Alert name variants

Alert Name	Engine
MAC.OSX.Backdoor.Janicab.A	AV
MAC.OSX.Backdoor.Janicab.B	AV
MacOS.Backdoor.Janicab	ATP Sandbox Adv. Heuristics
MacOS.Trojan.Janicab	ATP Sandbox Adv. Heuristics

Related families

MacMa Anchor Cobalt Strike Derusbi Machete

References