macOS UUID Fingerprinting Via ioreg

Duo Tech@duotech

•updated Jun 2, 2026•1•0•14

Detects macOS system fingerprinting targeting IOPlatformUUID using the ioreg command. This technique was observed being used by the FlutterShell malware (Operation FlutterBridge) to uniquely identify victims upon installation.