Macos Odyssey Stealer Dmg Execution

Drew Pilarski@barnabysDrew

•updated Aug 22, 2025•2•26

Detects the execution of an application from a mounted disk image (DMG) with a name known to be used by Odyssey Infostealer. This activity is indicative of initial access, where the user has been tricked into running a malicious application masquerading as a legitimate software installer or updater.