Tool
dockutil
- First Reported
- Sep 8, 2026
- Latest Reported
- Sep 8, 2026
Reported Context (1)
- It downloads dockutil from the C2 (/d/dockutil_arm64 or /d/dockutil_amd64), ad-hoc signs it, and builds a fake app bundle under ~/Library/Caches/vyf[.]lttzw[.]snjgwq/. The bundle's Info.plist is patched to impersonate Aikido Finds XCSSET in Flutter Package on pub.dev
Malware (1)
MITRE ATT&CK (14)
Vendors (1)
Products (9)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.