Description
Unicorn is an open source tool that queries macOS system data and suggests privilege escalation paths from misconfigured binaries and permissions. Red teams use it in authorized testing, and cyberattackers use it to gain root level access on compromised Macs.
Stats
- First seen
- June 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Application.HackTool.Unicorn.A |
| Document-HTML.Trojan.Unicorn |
| Document-Office.Trojan.Unicorn |
| Script-JS.Trojan.Unicorn |
| Script-Macro.Trojan.Unicorn |
| Script-PowerShell.Trojan.Unicorn |
| Trojan.Unicorn.B |
| Win32.Trojan.Unicorn |