All Detections

Macos Odyssey Stealer Persistence Launchdaemon

avatar
Drew Pilarski@barnabysDrew
updated Aug 22, 2025223

Detects the creation of a randomly named LaunchDaemon .plist file in /Library/LaunchDaemons/, a technique used by Odyssey Stealer for persistence.

YARA-L