# macOS.Gaslight - Rust Backdoor with AI-Analysis Evasion & Prompt Injection

> macOS.Gaslight is a Rust-based backdoor and information-stealing malware that employs novel anti-analysis techniques using embedded fake error messages and prompt injection strings to evade AI-powered malware analysis tools. Attributed with high confidence to North Korean threat actors, the malware combines traditional backdoor functionality with sophisticated social engineering against automated analysis pipelines.

- **Published:** 2026-06-28T00:00:00Z
- **Last reviewed:** 2026-06-28T00:00:00Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-0994
- **ID:** TL-2026-0994
- **Severity:** CRITICAL
- **Category:** MALWARE
- **Status:** ACTIVE
- **Actor:** Kimsuky (North Korea)
- **Detections:** 9 · **IOCs:** 32 (full data via the Threadlinqs MCP server — Purple tier)

## Description

macOS.Gaslight represents a significant evolution in anti-analysis malware design, targeting a growing blind spot in the cybersecurity ecosystem: LLM-powered and AI-assisted malware triage systems. Rather than traditional anti-analysis techniques (anti-VM, anti-debugging, anti-sandboxing), Gaslight embeds 38 fabricated system error messages and prompt injection payloads (totaling 3.5 KB) within the Rust binary to confuse and misdirect AI analysis tools. When analyzed by ChatGPT, Claude, or similar LLM-based malware analysis platforms, the malware generates false error traces and misleading debugging information that cause the AI to mischaracterize the threat or provide incorrect analysis. The backdoor component establishes command-and-control communication channels for remote code execution, while the information stealer component exfiltrates sensitive data from the infected macOS system. The malware's Rust implementation provides both code obfuscation benefits and cross-platform compilation flexibility. This attack represents a new category of "AI-aware" evasion targeting the emerging ecosystem of AI-powered security tools.
The threat demonstrates North Korean threat actor sophistication in adapting attacks to counter defensive technologies. The use of Rust for malware development reflects a trend among advanced persistent threat (APT) groups seeking language-based evasion advantages. Execution on macOS indicates targeting of creative professionals, engineers, and researchers—high-value targets in North Korean espionage operations.
Primary infection vectors remain under investigation but likely include supply chain compromise, trojanized developer tools, or macOS-specific delivery mechanisms (DMG files, PKG installers). The malware's ability to evade both static analysis tools and dynamic sandbox detection through AI confusion represents a critical gap in current detection methodologies.

## MITRE ATT&CK

- T1583 Acquire Infrastructure
- T1587 Develop Capabilities
- T1027 Obfuscated Files or Information
- T1566 Phishing
- T1195 Supply Chain Compromise
- T1204 User Execution
- T1059 Command and Scripting Interpreter
- T1203 Exploitation for Client Execution
- T1543 Create or Modify System Process
- T1037 Boot or Logon Initialization Scripts
- T1556 Modify Authentication Process
- T1548 Abuse Elevation Control Mechanism
- T1547.002 Authentication Package
- T1027 Obfuscated Files or Information
- T1140 Deobfuscate/Decode Files or Information
- T1578 Modify Cloud Compute Infrastructure
- T1553 Subvert Trust Controls
- T1036 Masquerading
- T1685 Disable or Modify Tools
- T1218 System Binary Proxy Execution
- T1633 Virtualization/Sandbox Evasion
- T1070 Indicator Removal
- T1056 Input Capture
- T1555 Credentials from Password Stores
- T1082 System Information Discovery
- T1057 Process Discovery
- T1083 File and Directory Discovery
- T1518 Software Discovery
- T1071 Application Layer Protocol
- T1572 Protocol Tunneling
- T1105 Ingress Tool Transfer
- T1041 Exfiltration Over C2 Channel
- T1048 Exfiltration Over Alternative Protocol
- T1486 Data Encrypted for Impact

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-0994