H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

Cryptoistic

[Cryptoistic](https://attack.mitre.org/software/S0498) is a backdoor, written in Swift, that has been used by [Lazarus Group](https://attack.mitre.org/groups/G0032).(Citation: SentinelOne Lazarus macOS July 2020)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[Cryptoistic](https://attack.mitre.org/software/S0498) is a backdoor, written in Swift, that has been used by [Lazarus Group](https://attack.mitre.org/groups/G0032).(Citation: SentinelOne Lazarus macOS July 2020)

Labels

malware
8 recorded

Relationships

uses
to Data from Local System
Technique
uses
to Encrypted Channel
Technique
uses
to File and Directory Discovery
Technique
uses
to File Deletion
Technique
uses
to Ingress Tool Transfer
Technique
uses
to Non-Application Layer Protocol
Technique
uses
to System Owner/User Discovery
Technique
uses
from Lazarus Group
Group
2 external

References

mitre-attack
S0498
open
SentinelOne Lazarus macOS July 2020
https://www.sentinelone.com/blog/four-distinct-families-of-lazarus-malware-target-apples-macos-platform/
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance