3 ms·
Someone who knows how OSX works - how is the malware getting execute permissions?
by TheNewAndy 15y ago
Someone who knows how OSX works - how is the malware getting execute permissions?
- darren_ 15y agoIt's not. For whatever reason, OS X installer pkg files are deemed 'safe files' by safari, which has an option to open such "safe" files automatically. So the thing that actually launches is a standard Installer.app from apple, but running a pkg script provided by the 'bad guys'. Fortunately Installer.app requires user interaction before it does anything, but it's still disconcerting.