dscl

Named by 3 kept items in this workspace.

Search every workspace for dscl. It matches the name as written, so it can find other things that share it.

The items that name it 3

Reverse Engineering the Six Stages of MacSync Stealer and RAT
writeup2026-07-29It is written here as dscl (Directory Service command line utility).
Abused by MacSync via 'dscl . authonly' to silently validate a phished password against Open Directory without opening a session
How Fake OpenClaw Installers Spread GhostSocks Malware
writeup2026-03-04
Used by the AMOS variant to validate Administrative credentials obtained from the user
AI-Poisoning & AMOS Stealer: The Biggest Mac Threat | Huntress
writeup2025-12-09
Directory Services command line tool abused via 'dscl -authonly <username> <password>' to silently validate victim's password in the background without a system UI prompt

All technologies in this workspace.