You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
applescript malware
About this tag
The tag covers AppleScript malware, focusing on macOS threats that abuse AppleScript for malicious purposes. Recent content discusses the Sapphire Sleet campaign, where attackers combine social engineering, AppleScript abuse, TCC manipulation, and staged exfiltration to compromise victims. This threat targets users in finance and crypto sectors, exploiting trust in fake software updates. The tag includes analysis of how AppleScript is used to automate malicious actions, bypass security controls, and maintain persistence on macOS systems. Discussions also cover detection and mitigation strategies for such threats.
Microsoft’s latest macOS threat report on Sapphire Sleet reads less like a traditional malware advisory and more like a case study in how modern intrusion campaigns are built to exploit trust. Rather than leaning on a zero-day or a platform flaw, the actor reportedly strings together social...