MALWARE FAMILY

AppleJeus

Internal ID: osx.applejeus

aliases

Last seen:Mar 17, 2026

Intelligence Profile

According to PcRisk AppleJeus is the name of backdoor malware that was distributed by the Lazarus group. They spread this malicious software through a fake app disguised as a cryptocurrency trading application called Celas Trade Pro.

Threat Analysis

AppleJeus is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://blog.lexfo.fr/ressources/Lexfo-WhitePaper-The_Lazarus_Constellation.pdf

→https://blog.sekoia.io/the-dprk-delicate-sound-of-cyber/

→https://brandefense.io/blog/apt-groups/lazarus-apt-group-apt38/

→https://objective-see.com/blog/blog_0x49.html

→https://objective-see.com/blog/blog_0x54.html

→https://objective-see.com/blog/blog_0x5F.html

→https://posts.specterops.io/introducing-venator-a-macos-tool-for-proactive-detection-34055a017e56

→https://securelist.com/apt-trends-report-q2-2020/97937/

→https://securelist.com/operation-applejeus-sequel/95596/

→https://securelist.com/operation-applejeus/87553/

Quick Facts

TypeMalware Family

Aliases1

Also Known As

osx.applejeus

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search AppleJeus