CVE-2020-9771

Reported Context (1)

The snapshot tier reuses CVE-2020-9771, the mount_apfs TCC bypass Csaba Fitzl published in 2020. We observed it running twice, once for Safari's cookies and once for the TCC database: AmnesiaStealer Uses ClickFix to Steal macOS Data and Hijack Browser Sessions

Malware (4)

People (1)

MITRE ATT&CK (15)

Products (8)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.