Malware

Apfell

Apfell is an open-source macOS command-and-control agent in the Mythic framework, implemented in JavaScript for Automation (JXA) and executed through the macOS automation runtime. It supports operator-directed post-exploitation activity on macOS, including host reconnaissance, screenshot capture, browser-data theft, and credential capture through fake password prompts. Apfell has been deployed through malicious software supply-chain campaigns targeting macOS development systems, where installation-time package scripts retrieve and execute JXA payloads. It has also been incorporated into Office-macro execution chains that invoke macOS scripting utilities to retrieve and run the agent. Apfell is associated with the Mythic C2 ecosystem and is distinct from Mythic's Poseidon macOS agent and Apollo Windows agent.

For your environment

Hunt this family in your stack

Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.

Start free trial

MITRE ATT&CK

Techniques & procedures

20 distinct techniques documented for this family, organized by ATT&CK tactic.

Initial Access

1 technique

T1195.001Compromise Software Dependencies and Development ToolsEvidence1

"Cybersecurity researchers have discovered four malicious NuGet packages... designed to target ASP.NET web application developers..." and "a malicious npm package named ambar-src..."

Execution

5 techniques

T1059Command and Scripting InterpreterEvidence2

This script generates an Office macro which uses osascript to download and execute the Mythic JXA .js payload.

T1059.002AppleScriptEvidence1

Рабочее решение — apfell-агент, который работает через osascript (AppleScript, T1059.002, Execution) и не зависит от архитектуры процессора. Callback через osascript проходит на arm64 без проблем.

T1059.005Visual BasicEvidence1

This script generates an Office macro which uses osascript to download and execute the Mythic JXA .js payload.

T1059.007JavaScriptEvidence2

Set up Mythic C2 server and generate an "apfell" jxa payload... Host that payload... uses osascript to download and execute the Mythic JXA .js payload.

T1204.002Malicious FileEvidence1

Copy and paste that macro into an MS Office doc.

Persistence

2 techniques

T1136Create AccountEvidence1

The macOS infection sequence executes Apfell... to conduct extensive data collection and create a new macOS user with admin privileges.

T1547.015Login ItemsEvidence1

Mythic does have the ability to add Login Item persistence even from the App Sandbox.

Privilege Escalation

1 technique

T1547.015Login ItemsEvidence1

Mythic does have the ability to add Login Item persistence even from the App Sandbox.

Stealth

2 techniques

T1036MasqueradingEvidence1

Remove the first line of the Mythic JXA .js launcher... Some static A/V signatures have been known to check for this static string.

T1218System Binary Proxy ExecutionEvidence1

This script generates an Office macro which uses osascript to download and execute the Mythic JXA .js payload.

Defense Impairment

1 technique

T1553.001Gatekeeper BypassEvidence1

Обход Gatekeeper (T1553.001, Defense Evasion)… Gatekeeper проверяет атрибут com.apple.quarantine у скачанных файлов и блокирует неподписанный или ненотаризованный код. А вот при доставке через curl, scp или rsync — не ставится, и Gatekeeper молчит.

Credential Access

2 techniques

T1552Unsecured CredentialsEvidence1

The malicious code embedded into the packages comes with capabilities to siphon system information, access tokens, environment secrets, and API keys from developer environments... It also harvests API keys for nine large language models (LLM) providers.

T1555Credentials from Password StoresEvidence1

The entire attack chain unfolds over two stages: a first-stage component that captures credentials and cryptocurrency keys and then loads a secondary stage that subsequently performs deeper harvesting of credentials from password managers.

Discovery

1 technique

T1082System Information DiscoveryEvidence1

The malicious code embedded into the packages comes with capabilities to siphon system information... Some of the data stolen by the agent are as follows - System information

Collection

2 techniques

T1113Screen CaptureEvidence1

Some of the data stolen by the agent are as follows - ... Screenshots

T1115Clipboard DataEvidence1

Some of the data stolen by the agent are as follows - ... Clipboard contents

Command and Control

3 techniques

T1071Application Layer ProtocolEvidence1

The same is true for installing C2 Profiles: sudo ./mythic-cli install github https://github.com/MythicC2Profiles/http | Installing Agents and C2 Profiles The Mythic repository itself does not host any Payload Types or any C2 Profiles... sudo ./mythic-cli install github https://github.com/MythicC2Profiles/http

T1071.001Web ProtocolsEvidence1

"...relays traffic... to the attacker's external C2 server" and "exfiltrated... to a Yandex Cloud domain"

T1105Ingress Tool TransferEvidence3

This script generates an Office macro which uses osascript to download and execute the Mythic JXA .js payload... Host that payload... use python -m SimpleHTTPServer to host

Exfiltration

1 technique

T1041Exfiltration Over C2 ChannelEvidence1

"...begin transmitting the ASP.NET Identity data through the local proxy to the external infrastructure." and "Once the data is collected, it's exfiltrated..."

ACTIVITY FEED

Recent activity

7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.

7 SOURCESView more in app

censys blogNews

Sep 15, 2026

Mythic C2 Activity at Internet Scale - Censys

Earlier macOS-focused project from which Mythic was developed as a successor.

the hacker newsNews

Feb 25, 2026

Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware

Mythic C2 JXA agent used on macOS to conduct reconnaissance, collect screenshots, steal data from Google Chrome, and capture system passwords via a fake prompt.

tenable blogNews

Feb 24, 2026

New malicious npm package 'ambar-src' targets developers with open source malware | Tenable®

Open-source Mythic agent for macOS (JavaScript) delivered via the malicious npm package’s preinstall chain; provides post-compromise capabilities such as host reconnaissance, screenshot capture, Chrome data theft, and credential/prompting via fake password dialogs.

the hacker newsNews

Feb 23, 2026

Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens

macOS JXA agent used for extensive data collection and privilege-establishing actions such as creating a new admin user.

+2 more in the timeline

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets match these IOCs, which detections are missing, which campaigns to expect next, and what to do in the next 30 minutes.

Start free trial

IOC matching

Match every observed IP, domain, and hash against your live telemetry.

Threat actor attribution

Named campaigns wielding this family, with evidence pinned to each claim.

Exploited vulnerabilities

CVEs this family uses for access and lateral movement.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

MITRE ATT&CK mapping20

Every documented technique, ranked by evidence weight.

Researcher chatter

Reddit, Mastodon, and CTI community discussion around this family.

Apfell