HOMETHREATSFruitFly
APT / THREAT GROUP

FruitFly

3
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: osx.fruitfly

Threat Analysis

FruitFly is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://arstechnica.com/security/2017/01/newly-discovered-mac-malware-may-have-circulated-in-the-wild-for-2-years/
→https://arstechnica.com/security/2017/07/perverse-malware-infecting-hundreds-of-macs-remained-undetected-for-years/
→https://blog.malwarebytes.com/threat-analysis/2017/01/new-mac-backdoor-using-antiquated-code/
→https://objectivebythesea.com/v3/talks/OBTS_v3_tReed.pdf
→https://www.documentcloud.org/documents/4346338-Phillip-Durachinsky-Indictment.html

Quick Facts

TypeAPT / Threat Group
Aliases3

Also Known As

FruitFlyQuimitchinosx.fruitfly

External Intelligence

Malpedia: osx.fruitfly

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search FruitFly