2 ms·
Is there an "approved" diagnostic tool that one should use to figure out whether your mac has the virus, or is vulnerable to it and needs patching?
by supernova87a 6y ago
Is there an "approved" diagnostic tool that one should use to figure out whether your mac has the virus, or is vulnerable to it and needs patching?
- prox 6y agoI think Malwarebytes was the company first identifying the thread. Correction : it was Red Canary working with Malwarebytes.
- kennywinker 6y agoCheck for the existence of these files: ~/Library/._insu (empty file used to signal the malware to delete itself) /tmp/agent.sh (shell script executed for installation callback) /tmp/version.json (file downloaded from from S3 to determine execution flow) /tmp/version.plist (version.json converted into a property list) https://redcanary.com/blog/clipping-silver-sparrows-wings/ https://redcanary.com/blog/clipping-silver-sparrows-wings/
- klaushardt 6y agohttps://github.com/ronaldstoner/sparrow-detector https://github.com/ronaldstoner/sparrow-detector