Tag
Adversaries leverage the macOS Finder Sync plugin mechanism to maintain persistence by using the 'pluginkit' utility to register and enable malicious extensions.