PirritMalware
Last reported 2 years ago, by Huntress1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1547.015Login Items
“This binary plist (property list) keeps a serialized record of the Launch Items and Login Items.”
- T1553.002Code Signing
“Whether we talk about code signing an application, notarization status, or TCC permissions, all of these security mechanisms have been put in place in an attempt to reduce the overall attack surface on macOS.”
What the reports say
1 report, newest first · the exact sentence from each-
macOS Terms and Trends You Should Know About“…mware gang in mid-April, to sophisticated nation-state malware dubbed RustBucket, to frustrating adware and search engine hijacking like Pirrit and Adload, the malware targeting macOS has become more abundant.”
Indicators in its reports
named in the reports above- backgroundtaskmanagementagent[.]appin 1 report
Copy this indicator · defanged
Thanks — we review every report.