Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on 30K Macs are infected with ‘Silver Sparrow’ virus and no one knows why. Parent comment
~/Library/._insu (empty file used to signal the malware to delete itself)
/tmp/agent.sh (shell script executed for installation callback)
/tmp/version.json (file downloaded from from S3 to determine execution flow)
/tmp/version.plist (version.json converted into a property list)
https://redcanary.com/blog/clipping-silver-sparrows-wings/
There are no comments on this comment yet.
~/Library/._insu (empty file used to signal the malware to delete itself)
/tmp/agent.sh (shell script executed for installation callback)
/tmp/version.json (file downloaded from from S3 to determine execution flow)
/tmp/version.plist (version.json converted into a property list)
https://redcanary.com/blog/clipping-silver-sparrows-wings/