macOS Fake Password Prompt via osascript display dialog

Emiliano Mema@Nosalva

•updated Aug 28, 2026•1•0•4

Detects the use of osascript to generate fake macOS system-style dialog boxes that solicit user credentials or administrator privileges. This technique is often employed by macOS infostealers to conduct GUI-based credential harvesting or to bypass user interaction requirements for privilege escalation.