MacOS malware persistence 12: Folder Actions. Simple AppleScript and C example (opens in new tab)

﷽ Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Note: Affiliate link – your enrollment helps support this platform at no extra cost to you. Hello, cybersecurity enthusiasts and white hackers! Continuing the macOS malware persistence series. In previous parts we already looked at LaunchAgents, shell environment hijacking, dylib hijacking, Login Items, cron, PAM modules, re-opened applications, period...