Pamstealer Rust Macho Stage2

Duo Tech@duotech

•updated Jul 6, 2026•1•0•2

Detects the second-stage Rust-based Mach-O binary downloaded and executed by the PamStealer JXA stager, identified via embedded C2 domain strings