https://objective-see.com/blog/blog_0x3A.html

Yara Rule - MacOS의 의심스러운 파일 (가능한 맬웨어 지속성) 관련 IOC 6개 발견

Yara 정의.

Neo23x0
Yara Rule - Suspicious PLIST files in MacOS (possible malware persistence)

Yara definition.
https://github.com/Neo23x0/signature-base/commit/5b34a20bbb9ca9b30ecc0d422785e8100a77aa9e