Keith D
@KeithD0 followers8 downloads3 copies0 likes72 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Categories
1
1
Platforms
1
Products / Services
1
MITRE Techniques
1
Detects sequential Transparency, Consent, & Control (TCC) permission prompts triggered by the 'Terminal' application within a 5-minute window. This behavior is indicative of the AMOS (Atomic macOS) Stealer automating the collection of unauthorized permissions to access sensitive system locations such as Finder, Desktop, Documents, and Notes.
