Tool
codesign
- First Reported
- Feb 5, 2026
- Latest Reported
- Jun 17, 2026
Reported Context (2)
- It then runs codesign -f -d -s to force an ad-hoc re-sign. macOS ClickFix Campaign Deploys AppleScript Stealer and Persistent RAT
- chooses from trusted Mac applications: Finder, Terminal, Script Editor, osascript, and bash. Using the codesign command codesign -d --requirements, it extracts the designated code-signing requirement from the target macOS Phishing Campaign Uses AppleScript to Steal Credentials and Abuse TCC
Malware (1)
People (2)
MITRE ATT&CK (19)
Vendors (1)
Products (17)
Tools (4)
Industries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.