Meow RAT Fake macOS System Preferences Dialog for Password Harvesting

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•3

Detects the use of osascript to spawn fake macOS system dialogs that mimic legitimate 'System Preferences' prompts to harvest user login passwords. This activity often involves AppleScript dialog commands combined with dscl authonly checks to validate the stolen credentials.