… Users who opt to run the agent locally rather than in the cloud, however, remain exposed unless they harden their configurations by disabling unprivileged user namespaces, restricting filesystem sharing, and running the Cowork daemon with strict mount protections. …
… It specifically guns for: SSH keys and known hosts Cloud credentials from AWS, Azure, and GCP Kubernetes configuration files Git and Docker authentication data Full browser profiles across major browsers It also runs extensive recon on the host, pulling user and privilege info, OS and hardware deta… …
… Depending on the system’s configuration and the privileges granted to the session, this could allow them to view the screen, open apps and files, or perform other actions on the Mac. …
… To establish long term access, the payload installs a background configuration file disguised as an Apple system account process called com.apple.accountsd . …
… They are going to ignore the software update prompt for as long as macOS will allow them This reinforces the reality that robust device management and security tools are a core security control, not just a tool for pushing config profiles. …
… In at least one campaign, attackers tucked malicious instructions inside SKILL.md files so an agent would do the work and then ask the user, very politely, for their password. …