Meow RAT macOS Browser Credential Database Access via osascript

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•5

Detects unauthorized access to Chrome and Firefox browser credential (Login Data, logins.json, key4.db) and cookie database files on macOS by non-browser processes, commonly observed in credential theft campaigns like ClickFix.