FAUTLReports

No Paste for You!

2026-03-31

Author: Patrick Wardle

file_types:so file_types:bash file_types:c platforms:windows file_types:xml file_types:swift platforms:macos architecture:arm64 debugger:lldb file_types:dylib

A Remote Pre-Authentication Overflow in LLDB's debugserver

2025-12-07

Objective-See

Author: Nathaniel Oh

file_types:bin debugger:gdb file_types:python file_types:so file_types:cpp platforms:macos platforms:ios debugger:lldb file_types:fish cve:cve-2025-43504

Apple Gets an 'F' for Slicing Apples

2024-02-22

Objective-See

Author: Patrick Wardle

architecture:arm malware_types:loader architecture:x86_64 file_types:so file_types:macho file_types:cpp platforms:macos file_types:mach-o debugger:lldb file_types:dylib

Analyzing DPRK's SpectralBlur

2024-01-04

Objective-See

Author: Patrick Wardle

file_types:zip file_types:bin architecture:x86_64 file_types:sh file_types:so malware_types:backdoor techniques:encryption platforms:macos file_types:mach-o debugger:lldb

Ironing out (the macOS) details of a Smooth Operator (Part II)

2023-04-01

Objective-See

Author: Patrick Wardle

architecture:x86_64 file_types:so architecture:x64 file_types:xml file_types:json platforms:macos file_types:mach-o debugger:lldb file_types:dylib techniques:anti-analysis

Ironing out (the macOS) details of a Smooth Operator (Part I)

2023-03-29

Objective-See

Author: Patrick Wardle

file_types:dll architecture:arm malware_types:loader architecture:x86_64 file_types:so architecture:x64 platforms:macos file_types:mach-o debugger:lldb techniques:anti-analysis

Where there is love, there is ...malware?

2023-02-14

Objective-See

Author: Patrick Wardle

architecture:x86_64 file_types:so file_types:php malware_types:backdoor techniques:persistence file_types:xml platforms:macos file_types:mach-o debugger:lldb disassembler:hopper

SeaFlower 藏海花

2022-06-13

Objective-See

Author: Taha Karim

file_types:html file_types:so malware_types:backdoor file_types:javascript techniques:hooking platforms:macos platforms:ios file_types:mach-o debugger:lldb file_types:objective-c

Property List Parsing Bug(s)

2020-10-21

Objective-See

Author: @OSCartography

file_types:so file_types:go platforms:windows file_types:xml platforms:macos platforms:ios debugger:lldb file_types:dylib file_types:objective-c disassembler:ghidra

Weaponizing a Lazarus Group Implant

2020-03-22

Objective-See

Author: Patrick Wardle

malware_types:fileless malware_types:loader file_types:python file_types:so techniques:persistence malware_types:trojan techniques:encryption platforms:macos file_types:mach-o debugger:lldb

Sniffing Authentication References on macOS

2020-03-17

Objective-See

Author: Patrick Wardle

architecture:x86_64 file_types:so file_types:cmd file_types:cpp techniques:privilege escalation platforms:macos debugger:lldb cve:cve-2017-7170

Pass the AppleJeus

2019-10-12

Objective-See

Author: Patrick Wardle

file_types:bin architecture:x86_64 file_types:sh file_types:php malware_types:backdoor architecture:x64 file_types:xml platforms:macos file_types:mach-o debugger:lldb

Writing a Process Monitor with Apple's Endpoint Security Framework

2019-09-16

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:bin file_types:so file_types:c techniques:persistence techniques:encryption platforms:macos platforms:ios debugger:lldb file_types:zsh

Death by vmmap

2019-02-25

Objective-See

file_types:bin architecture:x86_64 file_types:so file_types:go file_types:c malware_types:backdoor platforms:macos debugger:lldb file_types:dylib cve:cve-2018-4403

An Insecurity in Apple's Security Framework?

2018-05-02

Objective-See

malware_types:ransomware file_types:so file_types:c techniques:encryption file_types:cpp file_types:swift platforms:macos platforms:ios debugger:lldb

Who Moved My Pixels?!

2018-04-05

Objective-See

file_types:zip file_types:so file_types:go malware_types:backdoor file_types:js file_types:img techniques:sandbox platforms:macos debugger:lldb file_types:dylib

A Surreptitious Cryptocurrency Miner in the Mac App Store?

2018-03-11

Objective-See

file_types:txt architecture:x86_64 file_types:sh file_types:so file_types:c file_types:swift platforms:macos debugger:lldb file_types:objective-c

Ay MaMi - Analyzing a New macOS DNS Hijacker: OSX/MaMi

2018-01-11

Objective-See

file_types:bin architecture:x86_64 file_types:sh file_types:so platforms:windows file_types:xml platforms:macos file_types:mach-o debugger:lldb file_types:objective-c

Why <blank> Gets You Root

2017-11-29

Objective-See

file_types:so platforms:macos debugger:lldb cve:cve-2017-13872

From the Top to the Bottom; Tracking down CVE-2017-7149

2017-11-25

Objective-See

architecture:x86_64 file_types:so file_types:c platforms:macos debugger:lldb file_types:dylib file_types:objective-c cve:cve-2017-7149

Malware Analysis Reports