Fake Maccy authorization dialog phishing local password via osascript
Detects the use of 'osascript' to execute AppleScript-based dialog boxes designed to trick users into providing credentials or mimicking system administration prompts. These scripts use labels often associated with fake security or permission requests to harvest passwords.
Microsoft Sentinel (KQL)
