There's a quick analysis of it here: https://objective-see.com/blog/blog_0x1D.html https://objective-see.com/blog/blog_0x1D.html Along with the fact that Apple

There's a quick analysis of it here: https://objective-see.com/blog/blog_0x1D.html https://objective-see.com/blog/blog_0x1D.html Along with the fact that Apple updated the built-in sorta-antivirus in MacOS to detect it. But it only detects an SHA1 hash on the original DMG. If someone rebuilds the DMG or puts the malware with another app and builds a DMG, it'll bypass the MacOS sorta-antivirus.