Sapphire Sleet - Disabling Gatekeeper Checks (T1562.001)

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•4

Correlates the malware attempting to permanently disable macOS system-wide Gatekeeper functionality (spctl --master-disable).