installer-packages

Main Stage·22 min

• DEF CON
• Malware
• Date: Aug 2019
• Location: Las Vegas

Andy Grant

Dissects macOS PKG installer internals to reveal how malware authors abuse the package format for persistence and privilege escalation.