πNew WriteupβοΈ
βββββββββββββββ
πDate: Thu, 29 Jun 2023 15:24:32 GMT
βββββββββββββββ
βοΈTitle: From Scripting to Musing
βββββββββββββββ
πLink: https://medium.com/p/99638f074c60
βββββββββββββββ
Tags: #hacking #applescript #scripting
βββββββββββββββ
πDate: Thu, 29 Jun 2023 15:24:32 GMT
βββββββββββββββ
βοΈTitle: From Scripting to Musing
βββββββββββββββ
πLink: https://medium.com/p/99638f074c60
βββββββββββββββ
Tags: #hacking #applescript #scripting
Medium
From Scripting to Musing
Dusting off a couple of cobwebs from the keyboardβββyouβll excuse me, itβs been so long since Iβve last been here, Iβve forgotten how toβ¦
πNew WriteupβοΈ
βββββββββββββββ
πDate: Tue, 25 Jul 2023 02:12:52 GMT
βββββββββββββββ
βοΈTitle: Customising your firewall rules for macOS to block incoming connections
βββββββββββββββ
πLink: https://medium.com/p/dba8c40e88b1
βββββββββββββββ
Tags: #firewall #firewall_security #cybersecurity #applescript #macos_ventura
βββββββββββββββ
πDate: Tue, 25 Jul 2023 02:12:52 GMT
βββββββββββββββ
βοΈTitle: Customising your firewall rules for macOS to block incoming connections
βββββββββββββββ
πLink: https://medium.com/p/dba8c40e88b1
βββββββββββββββ
Tags: #firewall #firewall_security #cybersecurity #applescript #macos_ventura
Medium
Customising your firewall rules for macOS to block incoming connections
Introduction
β€· Title: Odyssey Stealer: macOS Under Attack by ClickFix-Driven Infostealer
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 28 Jun 2025 00:20:30 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #Browser Data #ClickFix #cryptocurrency #cybersecurity #Cyfirma #Infostealer #Keychain #macOS #malware #Odyssey Stealer #passwords
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 28 Jun 2025 00:20:30 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #Browser Data #ClickFix #cryptocurrency #cybersecurity #Cyfirma #Infostealer #Keychain #macOS #malware #Odyssey Stealer #passwords
Daily CyberSecurity
Odyssey Stealer: macOS Under Attack by ClickFix-Driven Infostealer
CYFIRMA uncovers "Odyssey Stealer," a new macOS malware using fake App Store prompts & typosquatting to steal crypto wallets, passwords, and browser data from Western users.
β€· Title: macOS Threat: AppleScript (.scpt) Files Emerge as New Stealth Vector for Stealer Malware
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 14 Nov 2025 00:05:56 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #Gatekeeper Bypass #macOS #malware delivery #SCPT File #social engineering #Stealer malware
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 14 Nov 2025 00:05:56 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #Gatekeeper Bypass #macOS #malware delivery #SCPT File #social engineering #Stealer malware
Daily CyberSecurity
macOS Threat: AppleScript (.scpt) Files Emerge as New Stealth Vector for Stealer Malware
A new macOS threat uses malicious AppleScript (.scpt) files, disguised as documents/updates, to bypass Gatekeeper and execute stealers like MacSync and Odyssey, exploiting user trust.
β€· Title: macOS Developers in the Crosshairs: GlassWormβs Wave 4 Exploits VS Code to Trojanize Hardware Wallets
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 06 Jan 2026 00:17:01 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AES_256_CBC #AppleScript #Developer Tools #GlassWorm #Hardware Wallets #KOI Security #Ledger #macOS security #malware #supply chain attack #Trezor #VS Code Extensions
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 06 Jan 2026 00:17:01 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AES_256_CBC #AppleScript #Developer Tools #GlassWorm #Hardware Wallets #KOI Security #Ledger #macOS security #malware #supply chain attack #Trezor #VS Code Extensions
Daily CyberSecurity
macOS Developers in the Crosshairs: GlassWormβs Wave 4 Exploits VS Code to Trojanize Hardware Wallets
The resilient βGlassWormβ threat actor, known for embedding malicious code into Visual Studio Code extensions, has returned with a sophisticated fourth wave of attacks. A new report frβ¦
β€· Title: New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 06 Jan 2026 00:06:22 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #accessibility #Apple #AppleScript #CVE_2025_43530 #macOS #macOS Sequoia #macOS Sonoma #macOS Tahoe #Mickey Jin #privacy #TCC Bypass #TOCTOU #Voiceover
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 06 Jan 2026 00:06:22 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #accessibility #Apple #AppleScript #CVE_2025_43530 #macOS #macOS Sequoia #macOS Sonoma #macOS Tahoe #Mickey Jin #privacy #TCC Bypass #TOCTOU #Voiceover
Daily CyberSecurity
New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
Appleβs privacy fortress, the Transparency, Consent, and Control (TCC) framework, has been breached once again. Security researcher Mickey Jin (@patch1t) has disclosed a sophisticated new vulnerabβ¦
β€· Title: The βCompatibilityβ Trap: New Mac Malware Tricks Users into Bypassing TCC
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 09 Feb 2026 00:41:43 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #Compatibility Wizard #cybersecurity #Darktrace #infosec #macOS Malware #Node.js Loader #phishing #social engineering #TCC Bypass
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 09 Feb 2026 00:41:43 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #Compatibility Wizard #cybersecurity #Darktrace #infosec #macOS Malware #Node.js Loader #phishing #social engineering #TCC Bypass
Daily CyberSecurity
The "Compatibility" Trap: New Mac Malware Tricks Users into Bypassing TCC
Darktrace finds Mac malware using a fake "Compatibility Wizard" to trick users. The AppleScript attack bypasses TCC to drop a Node.js backdoor.
β€· Title: The Script Editor Shift: How ClickFix Evades macOS 26.4 Security to Deliver Atomic Stealer
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 13 Apr 2026 07:00:49 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #Atomic Stealer #ClickFix #cybersecurity #Infostealer #Jamf #macOS 26.4 #macOS security #malware #Script Editor #social engineering
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 13 Apr 2026 07:00:49 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #Atomic Stealer #ClickFix #cybersecurity #Infostealer #Jamf #macOS 26.4 #macOS security #malware #Script Editor #social engineering
Daily CyberSecurity
The Script Editor Shift: How ClickFix Evades macOS 26.4 Security to Deliver Atomic Stealer
Jamf identifies a macOS ClickFix pivot: attackers now use the Script Editor to bypass Terminal scans and deliver Atomic Stealer. Learn how to stay protected.
β€· Title: Beyond Gatekeeper: How Sapphire Sleetβs AppleScript Trap Hijacks macOS and Crypto Wallets
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 21 Apr 2026 07:05:22 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #crypto security #infosec #Lazarus Group #macOS #malware #Microsoft Threat Intelligence #North Korea #Sapphire Sleet #TCC Bypass #Telegram Theft
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 21 Apr 2026 07:05:22 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #crypto security #infosec #Lazarus Group #macOS #malware #Microsoft Threat Intelligence #North Korea #Sapphire Sleet #TCC Bypass #Telegram Theft
Daily CyberSecurity
Beyond Gatekeeper: How Sapphire Sleetβs AppleScript Trap Hijacks macOS and Crypto Wallets
Microsoft uncovers Sapphire Sleet's macOS campaign. Using fake recruiters and AppleScript, they bypass TCC to steal crypto wallets, Telegram, and SSH keys.
β€· Title: ClickFix 2026: New AppleScript Malware Held macOS Users Hostage for Passwords
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 23 Apr 2026 01:11:34 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #ClickFix #Crypto theft #cybersecurity #Infostealer #macOS #macOS Tahoe #malware #Netskope #phishing #Session Hijacking #social engineering
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 23 Apr 2026 01:11:34 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript #ClickFix #Crypto theft #cybersecurity #Infostealer #macOS #macOS Tahoe #malware #Netskope #phishing #Session Hijacking #social engineering
Daily CyberSecurity
ClickFix 2026: New AppleScript Malware Held macOS Users Hostage for Passwords
Netskope uncovers a ClickFix macOS campaign that holds the UI hostage to steal system passwords, Keychains, and 200+ browser extensions.
β€· Title: The Script Editor Trap: New macOS βReaperβ Malware Bypasses Terminal Defenses to Steal Keychains
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 20 May 2026 07:22:37 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #applescript URI Scheme #Gatekeeper xattr Evasion #Keychain Exfiltration #LaunchAgent Persistence #macOS Reaper Malware #macOS Tahoe Security Bypass #Remote Access Trojan #Script Editor Exploit #SentinelOne Threat Intel #SHub Infostealer
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 20 May 2026 07:22:37 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #applescript URI Scheme #Gatekeeper xattr Evasion #Keychain Exfiltration #LaunchAgent Persistence #macOS Reaper Malware #macOS Tahoe Security Bypass #Remote Access Trojan #Script Editor Exploit #SentinelOne Threat Intel #SHub Infostealer
Information Security News
The Script Editor Trap: New macOS "Reaper" Malware Bypasses Terminal Defenses to Steal Keychains - Information Security News
A novel exploitation technique has surfaced on macOS, designed to deceive users via a counterfeit βsecurity update.β The malicious payload, designated as Reaperβan advanced iteration of the SHub information stealerβno longer relies on social...
β€· Title: Bypassing Terminal Protections: New SHub βReaperβ Variant Abuses AppleScript to Loot macOS Endpoints
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 22 May 2026 08:03:04 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript Exploit #crypto wallet theft #Cyber Security #Filegrabber #infosec #LaunchAgent Persistence #macOS Infostealer #Reaper Build #SentinelOne #SHub Stealer #Tahoe 26.4 Bypass
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 22 May 2026 08:03:04 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript Exploit #crypto wallet theft #Cyber Security #Filegrabber #infosec #LaunchAgent Persistence #macOS Infostealer #Reaper Build #SentinelOne #SHub Stealer #Tahoe 26.4 Bypass
Daily CyberSecurity
Bypassing Terminal Protections: New SHub "Reaper" Variant Abuses AppleScript to Loot macOS Endpoints
SentinelOne exposes the SHub Stealer "Reaper" variant. It bypasses Apple's latest Terminal paste mitigations to hijack crypto wallets and corporate documents.
β€· Title: macOS ClickFix AppleScript Stealer Hijacks Crypto Wallets
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 23 Jun 2026 08:28:10 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript Stealer #ClickFix #CVE_2024_27804 #CVE_2024_27805 #CVE_2024_27806 #macOS
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 23 Jun 2026 08:28:10 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #AppleScript Stealer #ClickFix #CVE_2024_27804 #CVE_2024_27805 #CVE_2024_27806 #macOS
Daily CyberSecurity
macOS ClickFix AppleScript Stealer Hijacks Crypto Wallets
A new macOS ClickFix AppleScript stealer named the Meow macOS stealer acts as a persistent RAT, hijacking wallets and evading detection. Protect your Macs.