Macos

Introducing fashion command-line tool

Arnaud Abbati21 min read
#swift #open-source #cli #macos

Compute and match file cryptographic or fuzzy hash digests, for threat hunting and binary triage on macOS.

XProtect behavioral flop

Arnaud Abbati12 min read
#xprotect #xcsset #reverse #sandbox #tcc #privacy #malware #macos

We discuss a bug in XProtect behavior events abused in the wild in the current XCSSET malware campaign, then we explain why XProtect behavioral telemetry is fundamentally flawed.