MITRE ATT&CKsoftware (malware)
S0276 Keydnap
- Domain
- enterprise
- Platforms
- macOS
- Aliases
- OSX/Keydnap
- Version
- 1.2
- Created
- 2018-10-17
Description
This piece of malware steals the content of the user's keychain while maintaining a permanent backdoor .
Related
Uses · MITRE ATT&CK (9)
- T1564.009 Resource Forking sub-technique
- T1071.001 Web Protocols sub-technique
- T1090.003 Multi-hop Proxy sub-technique
- T1059.006 Python sub-technique
- T1555.002 Securityd Memory sub-technique
- T1056.002 GUI Input Capture sub-technique
- T1036.006 Space after Filename sub-technique
- T1548.001 Setuid and Setgid sub-technique
- T1543.001 Launch Agent sub-technique
References
- https://www.welivesecurity.com/2016/07/06/new-osxkeydnap-malware-hungry-credentials/ OSX Keydnap malware
- https://objective-see.org/blog/blog_0x16.html synack 2016 review