Counter Strike Go Hacks For Mac

  1. Counter Strike Go Hacks For Macbook Pro
  2. Counter Strike Go Hacks For Mac Os

Like any other hack that you purchase from Crypto Cheats, our Counter-Strike: Global Offensive cheats are going to feature the most modern anti-cheat efforts possible. All of the features can be used without the worry of VAC, as this CSGO hack is completely VAC safe.

  • - Multihack for macOS / OSX players of the multiplayer game Counter Strike: Global Offensive. Cheat is fully free for first 3 uses, undetected for anti-cheats and will be updated all the time for free for customers. Works on macOS Yosemite and newer.
  • The following table highlights the top features included in the advantage tool for CSGO, as well as the other benefits of a membership with Mac Game Hacks. We currently offer two types of membership - hover your mouse over individual items to find out more.

(Photo source: Pony Strike: Global Offense by FilipinoNinja95)

We recently found Counter-Strike: Global Offensive (CS: Go) hacks on macOS that is also a trojan that could mine CryptoCurrencies without user consent.

According to VirusTotal Retrohunt, the threat is in the wild since the beginning of July 2017.

Warning: At the time of this writing, all URLs are live.

Entry Point: Portal

The entry point is portal, where a user can Register, Login and Download for free the hack installer.


The domain name was registered through eNom in April 2017, 14th, and resolves to a shared web host at namecheap:

HTTPS certificate was delivered by COMODO PositiveSSL in June 2017, 27th.

When logged in, members can browse the Prices page and purchase a premium subscription for 1, 3 or 6 months through Selly:

Members download the same archive of the free installer than guests:

According to the user GET query value, members count in August 2017, 22nd, is nearly two thousand.

We don’t know if the private installer of the hack also installs the mining software without user consent.


Binaries analysis

It’s all C++ Standard Library code. Network connections use libcurl and secure HTTPS protocol.

All executables, but the miner CLI, require super-user privileges, so the user must run the installer with sudo:

The main binary hides itself as Dynamic Web TWAIN, an online document scanning platform.


vHook is the installer. It is packed with UPX, probably to avoid user analysis and bypass some security products.

It is a command line interface:

With a valid member account, it downloads and extracts bootstrap.dylib and vhook.dylib from as to /Library/Application Support/:

It loads bootstrap.dylib from osxinj project. If Counter-Strike: Global Offensive is running, it downloads and extracts some fonts ( as to /Library/Fonts/), and injects vhook.dylib into csgo_osx64 process.

It could be a perfect deal for a CS: GO user, but it turns out vHook also sneaky downloads and extracts as to /var/, changes directory to /var and runs sudo ./helper &.

It then kills Terminal application to hide the detached process output.


helper is the miner downloader dropper. It is also packed with UPX.

It first asks the C&C server for the name of the binary to execute upon download:

It downloads as /, extracts its contents to /var/.log/, changes directory to /var/.log/ and runs sudo ./com.dynamsoft.WebHelper &.

At the time of this writing, URL response is a File Not Found 404 error code, but URL is live and send the expected archive.


com.dynamsoft.WebHelper is the miner downloader. Despite the name, it is not related to Dynamsoft.

It starts by downloading and extracting:

  • WebTwainService from to /var/.log/
  • com.dynamsoft.WebTwainService.plist from to /Library/LaunchDaemons/

It loads the daemon, sends computer unique identifier (UUID) and its version to C&C server, and checks if it meetsRequirements(), i.e. running as root and not in a debugger:

It then sleeps for one hour. If one is in a hurry, he or she can cut out the nap easily:

Once rested, it sends commands to C&C server every minute to ask if it should mine and update or kill itself:

Every minute, it also creates or updates the mining thread to:

  • download and extract to /var/.trash/.assets/
  • get miner settings (maximum core number, currency, email address)
  • check if Activity Monitor is running
  • check if it is already mining
  • check if it should stop mining
  • run cd /var/.trash/.assets/; ./ with appropriate arguments


WebTwainService tries to take care of com.dynamsoft.webhelper persistency. It is again packed with UPX.

Counter strike go hacks for mac windows 10

It sets its current directory to /var/.log and runs sudo ./com.dynamsoft.webhelper &, then recursively sleeps for one hour…

minergate-cli actually is the official MinerGateCLI v4.04:

It is written in Qt, so it comes with frameworks:

It takes as CPU as requested by com.dynamsoft.WebHelper so the user enjoys the delight of computer’s fans background music:

In this example, it is mining Monero (XMR) with all virtual machine cores (two: 200.0%).

Current MinerGate email address is [email protected], and [email protected] email address was also found hardcoded in another sample.

Maximum core number, CryptoCurrency and email address are provided by com.dynamsoft.WebHelper and the C&C server:


We finally ended up with vLoader, the private installer, and, once more, it is packed with UPX.

It does many checks against the C&C server:

They are trivial to bypass for anyone who can force a conditional jump:

Private payloads are downloaded and extracted to /var/.old/:

  • boots.dylib from
  • .uhdexter.dylib from

Compared to the free injected library, the private hook is very similar:

vLoader doesn’t uninstall any of the free version naughty payloads.

Finn and ponies

We didn’t spend too much time reverse engineering vhook.dylib. The source code was available on GitHub (archive) and videos of the hack are also available on YouTube here and there.

GitHub owner of the vHook project is fetusfinn (original author is ViKiNG) and we coincidentally found debugger symbols matching Finn username in GitHub’s libvHook.dylib and in all analyzed binaries:

This is how we know Finn’s project name is pwnednet. Shortened to pwnet, it sounds like poney in French, i.e. pony in English and, everybody loves ponies, so here you have OSX.Pwnet.A!

There also is a reference to someone named Jennifer Johansson in Xcode user data:

We didn’t take the time to ask pwned’s boyfriend on Discord if Finn is much into ponies:

But, just in case, here is a Dutch Pony for Finn and her team.

From Hackestria with ❤

EDIT: added vLoader on 2017/08/29.

Aimbot, wallhack & speedhack for Counter-Strike
Search for cs hack
Search our cheat database for cs cheats
Virus/spyware free hacks
All cheats are scanned with ESSET NOD32 Antivirus. Scan restults from VirusTotal are also posted.
Worried about getting banned?
Or just want more info about VAC then, read more about Valve Anti Cheat.
Support: CS hack support
Video guide: How to download and install a CS hack

Counter Strike Go Hacks For Mac
NameVAC Status (?)Date added
asdfHookHL March 27
Jul 25, 2012
NetShark CS1.6
Jul 25, 2012
R-Aimbot v1.0
Jul 25, 2012
ApocServ v2.7 final
Apr 29, 2012
[SOH] CS1.6 Hack v2
Apr 29, 2012
Adv Hack
Apr 29, 2012
ApocServ v2.6
Apr 1, 2012
asdfHook 1.0 HL
Apr 1, 2012
[SOH] CS1.6 Hack v1
Apr 1, 2012
TC-ECC Source
Mar 5, 2012

Counter strike go hacks for macbook

asdfHookHL March 27

Released: Jul 25, 2012 - Unknown
- Aimbot
- Wallhack
- ESP hack
- VAC 3 Undetected
- Windows XP/Vista/7 x86 & x64 Support
- Virtualization & Mutation
- Supports ALL HL1 Mods
Download asdfHookHL March 27
Downloaded 1.128.660 times

Show players on map.
This hack is not for noobs.
Download NetShark CS1.6
Downloaded 122.839 times

- Aimbot
- AutoAim
- KnifeAim
- AutoWall
- AutoShoot
- AutoPistol
- Team
- NoRecoil
- NoSpread
Download R-Aimbot v1.0
Downloaded 2.103.547 times

ApocServ v2.7 final

Released: Apr 29, 2012 - Unknown
CS 1.6 Server Hack - You need to have a server in order to use this.
Many more!
Download ApocServ v2.7 final
Downloaded 221.783 times

[SOH] CS1.6 Hack v2

Released: Apr 29, 2012 - Unknown
- Wallhack (Depthrange, Asus, Wire)
- Removals (No Flash & No Smoke)
- ESP (Name ESP, Distance ESP, Weapon ESP, Box ESP, Far ESP, Sound ESP, Entity ESP, Visible ESP)
- Miscellaneous (Wire Models, Crosshair)
- Lights (Lambert, Fullbright, Day/Night Mode)
- Font (Font size)
Download [SOH] CS1.6 Hack v2
Downloaded 525.318 times

* Aimbot (not done)
- Vector system
- Aimlock (seriously advice keeping this on if your using mouse1)
- AimSmooth (Human aiming)
- Aimkey system (Mouse1-5)
- AimTeam (0=Enemy 1=Friends 2=Everyone)
- FOV around target (wich means FOV decreases the further away target is)
* Wallhack
* NoSmoke
* NoFlash
- FlashPercent (what alpha flash should start at, around 200 is 'legit')
* AntiRecoil
- RecoilStrength (100 = No recoil)
Download Adv Hack
Downloaded 411.804 times

ApocServ Module Hack - For the Counter-Strike 1.6 Dedicated Server
Many more!
Download ApocServ v2.6
Downloaded 32.191 times

- Aimbot
- Wallhack
- ESP hack
- VAC 3 Undetected
- Windows XP/Vista/7 x86 & x64 Support
- Virtualization & Mutation
- Supports ALL HL1 Mods
Much more features..
Download asdfHook 1.0 HL
Downloaded 161.938 times

[SOH] CS1.6 Hack v1

Released: Apr 1, 2012 - Detected
- DepthRange Wallhack
- Asus Wallhack
- Wire Wallhack
- No flash/No smoke/No sky
- Lambert
- Day/Night mode
- Wire Models
- Crosshair
Download [SOH] CS1.6 Hack v1
Downloaded 97.748 times

Note this is only Source codes, you need to compile it yourself.
Download TC-ECC Source
Downloaded 79.159 times

Free VAC proof hacks for Counter-Strike og Counter-Strike Source - Gratis Vac proof cheats til CS and CS:Source!
Remember, when you download cheats & hacks from Tobys CS, you agree not to use them on VAC secured servers. It is against Valves policy, and you risk getting your Steam account permanently banned from all VAC secured servers.
It is at your own risk to use any of the cheats & hacks from We take no responsibility of any harm it may cause, or if you get banned.

Counter Strike Go Hacks For Macbook Pro

Follow us on Facebook

Subscribe to YouTube

Counter Strike Go Hacks For Mac Os