corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a087be-8719-7396-a325-4f824c98e2f9

MacOS Infection Vector: Using AppleScripts to bypass Gatekeeper

pberba.github.io · published 11 November 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at pberba.github.io Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
34
Words captured
1,856

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://developer.apple.com/news/?id=saqachfa
developer.apple.com
The ClickFix Factory: First Exposure of IUAM ClickFix Generator Read at the source ↗
unit42.paloaltonetworks.com
https://moonlock.com/macos-malware-homebrew-ads
moonlock.com
https://9to5mac.com/2024/10/17/security-bite-hackers-are-now-directing-users-to-terminal-to-bypass-gatekeeper-in-macos-sequoia/
9to5mac.com
https://0x626c6f67.xyz/posts/macos-dmg-malware/
0x626c6f67.xyz
https://huntability.tech/threat-note-2025-04-23-nk-zoom/
huntability.tech
https://www.huntress.com/blog/inside-bluenoroff-web3-intrusion-analysis
huntress.com
https://twitter.com/moonlock_lab/status/1980684233690746897?ref_src=twsrc%5Etfw
twitter.com
https://www.virustotal.com/gui/file/2e2cedbf1f09208ee7dad6ac5dec96e97bc0c41a31e190bc41e14f2929c05d4c
virustotal.com
https://www.virustotal.com/gui/file/b489039b502afd8b8267853c4d2cf65f75b76aa1f128f13d332f7d26ffcbd114
virustotal.com
https://www.virustotal.com/gui/file/6149bacfb02eb3db6f95947bc57d89bfb92b90f16f92a61266ea6fbec81d10b7/details
virustotal.com
https://x.com/L0Psec/status/1987181570265112719?s=20
x.com
https://www.malwarebytes.com/blog/threat-intel/2023/11/atomic-stealer-distributed-to-mac-users-via-fake-browser-updates
malwarebytes.com
Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs Read at the source ↗
securelist.com
https://www.virustotal.com/gui/file/14aba88b5f87ab9415bbca855d24abc3f151b819302930897e71e2626e823271
virustotal.com
https://www.virustotal.com/gui/file/a7c7d75c33aa809c231f1b22521ae680248986c980b45aa0881e19c19b7b1892
virustotal.com
https://www.virustotal.com/gui/file/8e897a1e0c3092a7a8f8c3946da6ef23f013dd7633bdea185d15f6ea9c902ef0
virustotal.com
https://www.virustotal.com/gui/file/580f6dd3f4cb78f80167a3d980bab3590dca877d78bb4e17360dc50fdbef7692/content
virustotal.com
https://x.com/moonlock_lab/status/1983550008344375443
x.com
https://www.virustotal.com/gui/file/24ba8e79bd22ece03fc7cd0b00822a38ecec146dc5c70404476110a4028c9caf
virustotal.com
https://www.virustotal.com/gui/file/f9f9ac24381acad8957724b6aacb0a7fe83d9359c6b7ceded10b2c8e2f4a729b
virustotal.com
https://www.virustotal.com/gui/file/2f99de308882fb9a6686913c4f6cc6654e75eb861d39a9ce33ae23c2d11271ec
virustotal.com
https://www.virustotal.com/gui/file/bef32c3e895b661b1aa755f98edd86791c9f9af2e6c936e89d526d9af8dab37c/
virustotal.com
https://www.virustotal.com/gui/file/7f69f3012e134d1f5084fbb9086697da66a9b0e9240c4e1413777b9e1099aca9
virustotal.com
https://www.virustotal.com/gui/file/31cd55a2f96f6d760653c28699c18589cf2e7d39a0f257579f587f3dce03a6c6
virustotal.com
https://www.virustotal.com/gui/file/c6dae9481354466531c186421dda521cbedc72c0bf32ba8d49f6eee2cbf2477f/
virustotal.com
https://www.virustotal.com/gui/file/99cfb160a2453a22cc025fe0afc21d660744205eff2885836d8e543fda50f06d/
virustotal.com
https://AppleScriptlibrary.wordpress.com/wp-content/uploads/2013/11/AppleScript-terminology-and-apple-eve-nt-codes-e28094-developer-documentation.pdf
applescriptlibrary.wordpress.com
https://github.com/t3l3machus/PowerShell-Obfuscation-Bible
github.com
Open with Notepad: Protecting users from malicious JavaScript Read at the source ↗
redcanary.com
https://0x626c6f67.xyz/posts/hiding-compiled-applescripts/
0x626c6f67.xyz
https://github.com/SigmaHQ/sigma/blob/4355ece230d68c36f08ebd53d5408ec5f8d629cc/rules/macos/process_creation/proc_creation_macos_susp_execution_macos_script_editor.yml
github.com
https://twitter.com/moonlock_lab/status/1980684233690746897
twitter.com
Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs Read at the source ↗
securelist.com