OSX/Shlayer

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[OSX/Shlayer](https://attack.mitre.org/software/S0402) is a Trojan designed to install adware on macOS that was first discovered in 2018.(Citation: Carbon Black Shlayer Feb 2019)(Citation: Intego Shlayer Feb 2018)

Associated Techniques (15)
ID ATT&CK Tactics
T1036.005 Match Legitimate Resource Name or Location -
T1059.004 Unix Shell -
T1082 System Information Discovery -
T1083 File and Directory Discovery -
T1105 Ingress Tool Transfer -
T1140 Deobfuscate/Decode Files or Information -
T1176.001 Browser Extensions -
T1204.002 Malicious File -
T1222.002 Linux and Mac File and Directory Permissions Modification -
T1548.004 Elevated Execution with Prompt -
T1553.001 Gatekeeper Bypass -
T1564 Hide Artifacts -
T1564.001 Hidden Files and Directories -
T1564.009 Resource Forking -
T1564.011 Ignore Process Interrupts -
Aliases (210)
Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider Zshlayer Crossrider
Metadata
ID: 656
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00