92ff08773995ebc8d55ec4b8e1a225d0d1e51efa4ef88b8849d0071230c9645a

Posts referencing this indicator

• Intelligence Center

  Cisco Talos

  MacOS RAT payload.

  2026-05-13
• Mitigating the Axios npm supply chain compromise

  Microsoft

  macOS native binary RAT payload dropped to /Library/Caches/com.apple.act.mond.

  2026-05-13
• Inside the Axios supply chain compromise - one RAT to rule them all

  Elastic Security Labs

  macOS stage-2 compiled C++ payload (com.apple.act.mond).

  2026-05-13
• Elastic releases detections for the Axios supply chain compromise

  Elastic Security Labs

  Hash of com.apple.act.mond, the custom Mach-O macOS backdoor.

  2026-05-13