indicatorfilename
~/Library/LaunchAgents/com.user.update.plist
- First seen
- 2026-05-13
- Last seen
- 2026-05-13
- Sightings
- 1
Posts referencing this indicator
- Intelligence Center
Malicious LaunchAgent plist used for persistence to extract and execute payloads from Finder comments at login.