#persistence-and-evasion
#persistence-and-evasion

[ follow ]

macOS also contains backdoors: how the 'ChillyHell' malware works

ChillyHell is stealthy macOS malware that persists via LaunchAgent/LaunchDaemon, removes forensic artifacts, sleeps intermittently, and uses modular C2-driven capabilities to exfiltrate data.

[ Load more ]

#persistence-and-evasion#persistence-and-evasion

macOS also contains backdoors: how the 'ChillyHell' malware works

#persistence-and-evasion
#persistence-and-evasion