ATT&CKReferencesalientvault macspy

alientvault macspy

PETER EWANE. (2017, June 9). MacSpy: OS X RAT as a Service. Retrieved September 21, 2018.

Open the source

Techniques0

Not cited by any technique.

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples2

TechniqueUsed byProcedure example
T1070.004
File Deletion
MalwareMacSpy

MacSpy deletes any temporary files it creates

T1564.001
Hidden Files and Directories
MalwareMacSpy

MacSpy stores itself in ~/Library/.DS_Stores/

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.