Tool
osascript
- First Reported
- Jun 17, 2026
- Latest Reported
- Jun 17, 2026
Reported Context (1)
- Victims are socially engineered into executing a curl command that fetches a gzip-compressed stager, which pipes the second-stage AppleScript directly into osascript memory. macOS ClickFix Campaign Deploys AppleScript Stealer and Persistent RAT
Malware (1)
MITRE ATT&CK (10)
Products (15)
Tools (2)
Industries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.