macOS Stealer - Osascript Administrator Prompt
Identifies the macOS stealer utilizing osascript to pop a fake system dialog, requesting the user's administrator password for privilege escalation.
Microsoft Sentinel (KQL)

Identifies the macOS stealer utilizing osascript to pop a fake system dialog, requesting the user's administrator password for privilege escalation.

Already have an account?