FAUTLReports

Heartbreaker 💔

2026-10-18

malware_types:ransomware file_types:txt file_types:so malware_types:virus techniques:persistence file_types:xml techniques:decryptor platforms:macos file_types:mach-o techniques:metamorphism

Detecting (Evil) Dylibs

2026-08-23

Objective-See

file_types:txt malware_types:loader file_types:so techniques:persistence techniques:sandbox platforms:macos architecture:arm64 file_types:mach-o file_types:dylib malware_types:adware

[0day] From Spotlight to Apple Intelligence

2025-03-27

Objective-See

Author: Patrick Wardle

file_types:so techniques:persistence techniques:sandbox platforms:macos cve:cve-2024-54533 cve:cve-2025-31199

CharmingCypress: Innovating Persistence

2024-02-13

VOLEXITY

Author: Ankur Saini, Callum Roxan, Charlie Gardner, Damien Cash

techniques:phishing file_types:so techniques:persistence

Why Join The Navy If You Can Be A Pirate?

2024-01-15

Objective-See

Author: Patrick Wardle

file_types:zip file_types:bin architecture:x86_64 malware_types:downloader malware_types:virus techniques:persistence malware_types:trojan file_types:xml platforms:macos file_types:mach-o

Where there is love, there is ...malware?

2023-02-14

Objective-See

Author: Patrick Wardle

architecture:x86_64 file_types:so file_types:php malware_types:backdoor techniques:persistence file_types:xml platforms:macos file_types:mach-o debugger:lldb disassembler:hopper

DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach

2022-06-15

VOLEXITY

Author: Steven Adair, Thomas Lancaster, Volexity Threat Research

malware_types:backdoor techniques:persistence malware_types:zero-day

Analyzing OSX.DazzleSpy

2022-01-25

Objective-See

Author: Patrick Wardle

architecture:arm architecture:x86_64 techniques:persistence file_types:xml platforms:macos file_types:mach-o cve:cve-2019-8526 file_types:objective-c file_types:pptx file_types:docx

Made In America: Green Lambert for OS X

2021-10-01

Objective-See

Author: Runa Sandvik

file_types:txt file_types:bin file_types:html file_types:sh file_types:php file_types:bash techniques:persistence file_types:xml platforms:macos file_types:mach-o

OSX.Hydromac

2021-06-04

Objective-See

Author: Taha Karim

architecture:arm malware_types:loader file_types:python techniques:honeypot file_types:so malware_types:downloader techniques:persistence disassembler:ida pro platforms:macos malware_types:adware

Adventures in Anti-Gravity (Part I)

2020-11-03

Objective-See

Author: Patrick Wardle

malware_types:ransomware platforms:linux file_types:bin architecture:x86_64 file_types:python file_types:php techniques:persistence malware_types:spyware platforms:macos file_types:mach-o

Weaponizing a Lazarus Group Implant

2020-03-22

Objective-See

Author: Patrick Wardle

malware_types:fileless malware_types:loader file_types:python file_types:so techniques:persistence malware_types:trojan techniques:encryption platforms:macos file_types:mach-o debugger:lldb

Lazarus Group Goes 'Fileless'

2019-12-03

Objective-See

Author: Patrick Wardle

file_types:bin malware_types:fileless architecture:x86_64 file_types:sh techniques:persistence malware_types:trojan file_types:xml platforms:macos file_types:mach-o malware_types:adware

Writing a File Monitor with Apple's Endpoint Security Framework

2019-09-17

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:bin file_types:so file_types:c techniques:persistence platforms:macos file_types:zsh

Writing a Process Monitor with Apple's Endpoint Security Framework

2019-09-16

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:bin file_types:so file_types:c techniques:persistence techniques:encryption platforms:macos platforms:ios debugger:lldb file_types:zsh

Burned by Fire(fox) (Part III)

2019-06-23

Objective-See

file_types:powershell architecture:x86_64 file_types:python malware_types:virus malware_types:backdoor techniques:persistence file_types:xls platforms:macos file_types:mach-o file_types:objective-c

Burned by Fire(fox) (Part III)

2019-06-22

Objective-See

platforms:linux file_types:bin file_types:html file_types:sh file_types:bash malware_types:backdoor techniques:persistence file_types:xml platforms:macos file_types:objective-c

Mac Adware, à la Python

2019-03-25

Objective-See

file_types:bin file_types:dat file_types:html file_types:python file_types:sh file_types:bash techniques:persistence file_types:javascript platforms:macos malware_types:adware

The Mac Malware of 2018

2019-01-01

Objective-See

techniques:persistence

Block Blocking Login Items

2018-07-23

Objective-See

techniques:persistence

Malware Analysis Reports