Hackers Weaponize AppleScript to Creatively Deliver macOS Malware Mimic as Zoom/Teams Updates

AppleScript Abused to Spread Fake Zoom and Teams macOS Updates

Security researchers have uncovered a new attack vector leveraging AppleScript (.scpt) files to deliver malware disguised as legitimate software updates, including fake Zoom, Microsoft Teams, and Chrome installers.  This method highlights a growing threat to macOS users as cybercriminals weaponize native scripting tools to evade Apple’s Gatekeeper security mechanisms. From Right-Click Bypass to .SCPT: The Evolution of macOS Malware In 2024, Appl…

AppleScript Used to Deliver macOS Malware Disguised as Zoom & Teams Updates

Since Apple removed the popular “right-click and open” Gatekeeper override in August 2024, threat actors have shifted their tactics to deliver malware on macOS. Among emerging techniques, attackers are increasingly leveraging AppleScript (.scpt) files to bypass security controls and distribute credential stealers often disguised as legitimate software updates from popular applications such as Zoom and […] The post AppleScript Used to Deliver mac…