Record · corpus.blog/posts/01a087a3-d6d4-727a-b6e1-ebb2a31b924f

XProtect behavioral flop

melomac.com · published 4 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at melomac.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 44
Words captured: 3,842

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.trendmicro.com/en_us/research/20/h/xcsset-mac-malware--infects-xcode-projects--uses-0-days.html

trendmicro.com

https://developer.apple.com/videos/wwdc2020/

developer.apple.com

https://docs.virustotal.com/docs/livehunt

docs.virustotal.com

https://github.com/neurobin/shc

github.com

https://github.com/dimasenchik/AdHash-iOS/commit/6fd789a906e5df904fe8c25add29aa247c12e3ea

github.com

https://eclecticlight.co/2025/01/29/watch-your-background-background-activities-with-das-cts/

eclecticlight.co

https://github.com/kohnakagawa/

github.com

https://www.ffri.jp/en

ffri.jp

https://i.blackhat.com/BH-USA-25/Presentations/USA-25-Koh-XUnprotect-Reverse-Engineering-macOS-XProtect-Remediator-wp.pdf

i.blackhat.com

https://blackhat.com/us-25/briefings/schedule/index.html

blackhat.com

https://youtu.be/jEmMGk31b5o

youtu.be

https://objectivebythesea.org/v8/talks/OBTS_v8_kNakagawa.pdf

objectivebythesea.org

https://objectivebythesea.org/v8/talks.html

objectivebythesea.org

https://www.romab.com/ironsuite/SBPL.html

romab.com

Apple Sandbox Guide v1.0 Read at the source ↗

reverse.put.as

https://reverse.put.as/

reverse.put.as

https://karol-mazurek.medium.com/

karol-mazurek.medium.com

https://www.patreon.com/posts/sandbox-check-145607641

patreon.com

https://github.com/cellebrite-labs/sandblaster

github.com

https://github.com/blacktop/ipsw

github.com

https://www.refocuser.com/2009/04/bouncing-at-zero-zbb-in-life/

refocuser.com

https://developer.apple.com/documentation/macos-release-notes/macos-26_1-release-notes

developer.apple.com

https://eclecticlight.co/2025/11/04/apple-has-released-updates-to-xprotect-and-xprotect-remediator-2/

eclecticlight.co

https://grahamrpugh.com/2025/08/27/unpicking-sucatalog-files.html

grahamrpugh.com

https://archive.org/details/sucatalog_089-06171

archive.org

https://support.apple.com/guide/security/protecting-app-access-to-user-data-secc01781f46/

support.apple.com

https://support.apple.com/102154

support.apple.com

https://support.apple.com/102518

support.apple.com

https://cloud.google.com/blog/topics/threat-intelligence/unc1069-targets-cryptocurrency-ai-social-engineering

cloud.google.com

https://developer.apple.com/documentation/macos-release-notes/macos-26_2-release-notes

developer.apple.com

https://support.apple.com/125886

support.apple.com

https://support.apple.com/125887

support.apple.com

https://support.apple.com/125888

support.apple.com

https://developer.apple.com/documentation/macos-release-notes/macos-27-release-notes

developer.apple.com

https://support.apple.com/guide/security/secddd1d86a6

support.apple.com

https://developer.apple.com/documentation/devicemanagement/mdm

developer.apple.com

https://www.dockitty.app/

dockitty.app

https://github.com/northpolesec/santa

github.com

https://developer.apple.com/documentation/endpointsecurity

developer.apple.com

https://support.apple.com/guide/security/gatekeeper-and-runtime-protection-sec5599b66df/

support.apple.com

https://eclecticlight.co/2025/08/05/apple-has-just-released-updates-to-xprotect-and-xprotect-remediator-18/

eclecticlight.co

https://archive.org/details/sucatalog_082-75748

archive.org

https://eclecticlight.co/2026/02/17/apple-has-just-released-updates-to-xprotect-and-xprotect-remediator-19/

eclecticlight.co

https://archive.org/details/sucatalog_089-33637

archive.org