Shlayer

Reported Context (6)

Threat actors behind macOS malware like the Shlayer adware dropper have used this weakness in their attacks. How Mac Malware Adapts to Apple’s Built-In Security Protections
activity, macOS observes items like PUPs, adware like search engine hijacking and clickbait, or Shlayer, which leverages social engineering techniques to get the user to override Gatekeeper to execute. So Five Common Myths About macOS Security, Debunked
We've witnessed malware exploiting 0-days in the operating system to persist, as well as leveraging shells like zsh along with the Shlayer malware. Mac Security Myths: Why macOS Still Needs Protection
the most immediate benefit when looking at macOS malware. If we look at the sample below, we can see the Shlayer malware running some commands from the command line. We can see all of the arguments, in an array, that How macOS Endpoint Security Gives Security Tools Visibility Into System Activity
which I know are safe, and without this override ability, I wouldn't be able to open it. Malware like Shlayer uses this ability to skirt around Apple's security mechanisms and social engineers users into opening A Guide to macOS’s Built-In Security and Malware-Removal Tools

CVE (1)

Malware (11)

People (6)

Threat Actors (1)

MITRE ATT&CK (2)

Vendors (2)

Products (21)

Tools (9)

Industries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.