finder.app

Domain

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

July 6, 2026

Last Seen

September 9, 2026

API

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Referenced as a filename in the context of a fake application

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (2)

XCSSET Malware Evolves with Enhanced Obfuscation and Persistence Techniques

5d ago·3 sources

PamStealer: New macOS Infostealer Targets Users via Fake Maccy Manager

Jul 3·86 sources

Related Entities

Malware PamStealer Xcsset T1041 - Exfiltration Over C2 Channel T1059.005 - Visual Basic T1059.004 - Unix Shell T1059.007 - JavaScript T1071.001 - Web Protocols T1071 - Application Layer Protocol T1547 - Boot Or Logon Autostart Execution T1056 - Input Capture MacOS