Cybersecurity analysts have uncovered fresh artifacts linked to an Apple macOS malware named ZuRu, recognized for spreading through trojanized iterations of legitimate applications.

SentinelOne, in a recent report provided to The Hacker News, indicated that this malware has been seen disguising itself as the cross-platform SSH client and server management application Termius in late May 2025.

“ZuRu malware