Meow RAT Fake System Preferences Dialog Harvesting macOS Password via osascript

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•5

Detects the use of 'osascript' to display credential prompts or 'dscl' with authentication-related arguments, which could indicate an attempt to phish user credentials or enumerate/create accounts on macOS systems.