indicatorfilename
.mpwd
- First seen
- 2026-08-18
- Last seen
- 2026-08-18
- Sightings
- 1
Posts referencing this indicator
- How a Google Search for Claude Led to MacSync
Local file where stolen user credentials are written for immediate retrieval by the Mach-O RAT.