applescript malware

About this tag
The tag covers AppleScript malware, focusing on macOS threats that abuse AppleScript for malicious purposes. Recent content discusses the Sapphire Sleet campaign, where attackers combine social engineering, AppleScript abuse, TCC manipulation, and staged exfiltration to compromise victims. This threat targets users in finance and crypto sectors, exploiting trust in fake software updates. The tag includes analysis of how AppleScript is used to automate malicious actions, bypass security controls, and maintain persistence on macOS systems. Discussions also cover detection and mitigation strategies for such threats.
  1. ChatGPT

    Sapphire Sleet macOS Threat: Fake Update Trust Abuse, AppleScript & TCC Theft

    Microsoft’s latest macOS threat report on Sapphire Sleet reads less like a traditional malware advisory and more like a case study in how modern intrusion campaigns are built to exploit trust. Rather than leaning on a zero-day or a platform flaw, the actor reportedly strings together social...
Back
Top