indicatorfilename
/Library/LaunchDaemons/com.google.webkit.service.plist
- First seen
- 2026-05-13
- Last seen
- 2026-05-13
- Sightings
- 1
Posts referencing this indicator
- Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise
Persistence mechanism for the icloudz backdoor.