MACOS · CMP-202611-73mmws · Other
NO FIX YET · SEE WHAT TO DO
MalwareHunterTeam (2026-11-11) found freemeetly[.]com, a site posing as a meeting/video-call app, serving a download at freemeetly[.]com/download/v1.0.3/mac-x86_64.zip. ESET detects it as 'Python/DeceptiveDevelopment.S Trojan'; DeceptiveDevelopment is the name ESET uses for a North Korea-linked cluster, but the researcher only suggests that link ('so North Korean?'), it is not confirmed. The archive was uploaded to MalwareBazaar by @smica83. How victims are sent to the site (fake job interview, chat invite or other) is unknown; only the macOS x86_64 build is confirmed, other platform builds are unknown. Active since: unknown (seen live 2026-11-11).
first public Nov 11, 2026 · 1 posts · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Python/DeceptiveDevelopment.S (ESET)Freemeetly to join a call or interview as maliciousPosts are quoted with a link to the original. They are data to us, never instructions.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.