{"code":"var Component=(()=>{var p=Object.create;var r=Object.defineProperty;var o=Object.getOwnPropertyDescriptor;var g=Object.getOwnPropertyNames;var m=Object.getPrototypeOf,y=Object.prototype.hasOwnProperty;var F=(e,n)=>()=>(n||e((n={exports:{}}).exports,n),n.exports),C=(e,n)=>{for(var l in n)r(e,l,{get:n[l],enumerable:!0})},d=(e,n,l,c)=>{if(n&&typeof n==\"object\"||typeof n==\"function\")for(let h of g(n))!y.call(e,h)&&h!==l&&r(e,h,{get:()=>n[h],enumerable:!(c=o(n,h))||c.enumerable});return e};var u=(e,n,l)=>(l=e!=null?p(m(e)):{},d(n||!e||!e.__esModule?r(l,\"default\",{value:e,enumerable:!0}):l,e)),b=e=>d(r({},\"__esModule\",{value:!0}),e);var a=F((S,s)=>{s.exports=_jsx_runtime});var A={};C(A,{default:()=>k});var i=u(a());function t(e){let n={a:\"a\",code:\"code\",em:\"em\",h2:\"h2\",h3:\"h3\",hr:\"hr\",img:\"img\",li:\"li\",ol:\"ol\",p:\"p\",pre:\"pre\",span:\"span\",strong:\"strong\",table:\"table\",tbody:\"tbody\",td:\"td\",th:\"th\",thead:\"thead\",tr:\"tr\",ul:\"ul\",...e.components};return(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(n.p,{children:\"\\u4E00\\u79CD\\u590D\\u6742\\u7684\\u65B0\\u578B MacSync Stealer \\u6076\\u610F\\u8F6F\\u4EF6\\u53D8\\u4F53\\u5DF2\\u7ECF\\u51FA\\u73B0\\uFF0C\\u5B83\\u5229\\u7528 Apple \\u81EA\\u8EAB\\u7684\\u5B89\\u5168\\u57FA\\u7840\\u8BBE\\u65BD\\u6765\\u7ED5\\u8FC7 Gatekeeper \\u4FDD\\u62A4\\u3002Jamf Threat Labs \\u4E8E 2025 \\u5E74 12 \\u6708\\u53D1\\u73B0\\u4E86\\u8FD9\\u4E00\\u5A01\\u80C1\\uFF0C\\u5B83\\u4EE3\\u8868\\u4E86 macOS \\u6076\\u610F\\u8F6F\\u4EF6\\u5206\\u53D1\\u7684\\u91CD\\u5927\\u6F14\\u53D8\\uFF0C\\u5229\\u7528\\u7ECF\\u8FC7\\u4EE3\\u7801\\u7B7E\\u540D\\u548C Apple \\u516C\\u8BC1\\u7684\\u5E94\\u7528\\u7A0B\\u5E8F\\u6765\\u9003\\u907F\\u68C0\\u6D4B\\u5E76\\u7A83\\u53D6\\u654F\\u611F\\u6570\\u636E\\uFF0C\\u5305\\u62EC\\u52A0\\u5BC6\\u8D27\\u5E01\\u94B1\\u5305\\u3001\\u6D4F\\u89C8\\u5668\\u51ED\\u636E\\u548C\\u7CFB\\u7EDF\\u4FE1\\u606F\\u3002\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.img,{alt:\"MacSync Stealer Security Threat\",src:\"/images/blog/macsync-stealer-security-guide-2025/cybersecurity-threat.jpg\",width:\"2400\",height:\"1600\"})}),`\n`,(0,i.jsx)(n.h2,{id:\"\\u6267\\u884C\\u6458\\u8981macsync-stealer-\\u5A01\\u80C1\",children:\"\\u6267\\u884C\\u6458\\u8981\\uFF1AMacSync Stealer \\u5A01\\u80C1\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u5173\\u952E\\u5B89\\u5168\\u8B66\\u62A5\",children:\"\\u5173\\u952E\\u5B89\\u5168\\u8B66\\u62A5\"}),`\n`,(0,i.jsx)(n.p,{children:\"MacSync Stealer \\u4EE3\\u8868\\u4E86 2025 \\u5E74\\u6700\\u590D\\u6742\\u7684 macOS \\u6076\\u610F\\u8F6F\\u4EF6\\u5A01\\u80C1\\u4E4B\\u4E00\\uFF0C\\u5B83\\u5229\\u7528\\u4E86 Apple \\u5B89\\u5168\\u67B6\\u6784\\u4E2D\\u7684\\u4E00\\u4E2A\\u57FA\\u672C\\u5F31\\u70B9\\u3002\\u4E0E\\u4EE5\\u524D\\u4F9D\\u9760\\u8BF1\\u9A97\\u7528\\u6237\\u7ED5\\u8FC7\\u5B89\\u5168\\u8B66\\u544A\\u7684\\u6076\\u610F\\u8F6F\\u4EF6\\u4E0D\\u540C\\uFF0C\\u6B64\\u53D8\\u4F53\\u901A\\u8FC7\\u4E86\\u6240\\u6709 Gatekeeper \\u548C XProtect \\u68C0\\u67E5\\uFF0C\\u56E0\\u4E3A\\u5B83\\u5E26\\u6709\\u5408\\u6CD5\\u7684 Apple \\u516C\\u8BC1\\u3002\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u4E3B\\u8981\\u5A01\\u80C1\\u7279\\u5F81\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"Apple \\u516C\\u8BC1\"}),\"\\uFF1A\\u65E0\\u9700\\u8B66\\u544A\\u5373\\u53EF\\u901A\\u8FC7 Gatekeeper \\u5B89\\u5168\\u68C0\\u67E5\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u4EE3\\u7801\\u7B7E\\u540D\"}),\"\\uFF1A\\u4F7F\\u7528\\u6709\\u6548\\u7684\\u5F00\\u53D1\\u8005 ID\\uFF08Team ID\\uFF1AGNJLS3UYZ4\\uFF0C\\u73B0\\u4EE5\\u6B64\\u64A4\\u9500\\uFF09\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u591A\\u9636\\u6BB5\\u6709\\u6548\\u8F7D\\u8377\"}),\"\\uFF1A\\u521D\\u59CB\\u4E8C\\u8FDB\\u5236\\u6587\\u4EF6\\u662F\\u826F\\u6027\\u7684\\uFF1B\\u6076\\u610F\\u6709\\u6548\\u8F7D\\u8377\\u5728\\u5B89\\u88C5\\u540E\\u4EA4\\u4ED8\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u5168\\u9762\\u6570\\u636E\\u7A83\\u53D6\"}),\"\\uFF1A\\u9488\\u5BF9\\u6D4F\\u89C8\\u5668\\u3001\\u52A0\\u5BC6\\u8D27\\u5E01\\u94B1\\u5305\\u3001Keychain \\u548C Telegram\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u540E\\u95E8\\u80FD\\u529B\"}),\"\\uFF1A\\u5305\\u542B\\u57FA\\u4E8E Go \\u7684\\u540E\\u95E8\\u4EE5\\u8FDB\\u884C\\u6301\\u4E45\\u8BBF\\u95EE\"]}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u8C01\\u5904\\u4E8E\\u98CE\\u9669\\u4E4B\\u4E2D\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u52A0\\u5BC6\\u8D27\\u5E01\\u6301\\u6709\\u8005\\u548C\\u4EA4\\u6613\\u8005\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u4ECE\\u975E\\u5B98\\u65B9\\u6765\\u6E90\\u4E0B\\u8F7D\\u8F6F\\u4EF6\\u7684\\u7528\\u6237\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u6CA1\\u6709\\u9AD8\\u7EA7\\u7AEF\\u70B9\\u4FDD\\u62A4\\u7684\\u4F01\\u4E1A\\u73AF\\u5883\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u4EFB\\u4F55\\u4EC5\\u57FA\\u4E8E Gatekeeper \\u6279\\u51C6\\u800C\\u4FE1\\u4EFB\\u5E94\\u7528\\u7A0B\\u5E8F\\u7684\\u4EBA\"}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u65E5\\u76CA\\u589E\\u957F\\u7684-macos-\\u6076\\u610F\\u8F6F\\u4EF6\\u5F62\\u52BF\",children:\"\\u65E5\\u76CA\\u589E\\u957F\\u7684 macOS \\u6076\\u610F\\u8F6F\\u4EF6\\u5F62\\u52BF\"}),`\n`,(0,i.jsx)(n.p,{children:\"MacSync Stealer \\u7684\\u51FA\\u73B0\\u53D1\\u751F\\u5728 macOS \\u5A01\\u80C1\\u8FC5\\u901F\\u5347\\u7EA7\\u7684\\u80CC\\u666F\\u4E0B\\uFF1A\"}),`\n`,(0,i.jsxs)(n.table,{children:[(0,i.jsx)(n.thead,{children:(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.th,{children:\"\\u6307\\u6807\"}),(0,i.jsx)(n.th,{children:\"2024 vs 2025\"})]})}),(0,i.jsxs)(n.tbody,{children:[(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"macOS \\u5A01\\u80C1\\u589E\\u957F\"}),(0,i.jsx)(n.td,{children:\"\\u589E\\u957F 400% (Red Canary)\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"AMOS \\u6076\\u610F\\u8F6F\\u4EF6\\u68C0\\u6D4B\"}),(0,i.jsx)(n.td,{children:\"2025 \\u5E74 8 \\u6708\\u6FC0\\u589E 300%\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"ClickFix \\u653B\\u51FB\\u6FC0\\u589E\"}),(0,i.jsx)(n.td,{children:\"2025 \\u5E74\\u4E0A\\u534A\\u5E74\\u589E\\u957F 517%\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"\\u906D\\u9047\\u5A01\\u80C1\\u7684 Mac \\u7528\\u6237\"}),(0,i.jsx)(n.td,{children:\"66% \\u7684\\u7528\\u6237\\u81F3\\u5C11\\u7ECF\\u5386\\u8FC7\\u4E00\\u6B21\\u7F51\\u7EDC\\u5A01\\u80C1\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"\\u5168\\u7403 AMOS \\u653B\\u51FB\\u8303\\u56F4\"}),(0,i.jsx)(n.td,{children:\"120+ \\u4E2A\\u56FD\\u5BB6\"})]})]})]}),`\n`,(0,i.jsx)(n.p,{children:\"Mac \\u7A83\\u5BC6\\u6076\\u610F\\u8F6F\\u4EF6\\u7684\\u5165\\u95E8\\u4EF7\\u683C\\u5DF2\\u4ECE\\u6BCF\\u6708 3,000 \\u7F8E\\u5143\\u964D\\u81F3 1,000 \\u7F8E\\u5143\\uFF0C\\u4F7F\\u66F4\\u5E7F\\u6CDB\\u7684\\u7F51\\u7EDC\\u72AF\\u7F6A\\u5206\\u5B50\\u80FD\\u591F\\u83B7\\u5F97\\u8FD9\\u4E9B\\u5DE5\\u5177\\u3002\"}),`\n`,(0,i.jsx)(n.h2,{id:\"\\u6280\\u672F\\u5206\\u6790macsync-stealer-\\u5982\\u4F55\\u5DE5\\u4F5C\",children:\"\\u6280\\u672F\\u5206\\u6790\\uFF1AMacSync Stealer \\u5982\\u4F55\\u5DE5\\u4F5C\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u8D77\\u6E90\\u4E0E\\u6F14\\u53D8\",children:\"\\u8D77\\u6E90\\u4E0E\\u6F14\\u53D8\"}),`\n`,(0,i.jsx)(n.p,{children:'MacSync Stealer \\u6700\\u521D\\u662F\\u4F5C\\u4E3A \"mac.c stealer\" \\u7684\\u54C1\\u724C\\u91CD\\u5851\\u51FA\\u73B0\\u7684\\uFF0C\\u8BE5\\u8F6F\\u4EF6\\u4E8E 2025 \\u5E74 4 \\u6708\\u5728\\u5A01\\u80C1\\u884C\\u4E3A\\u8005 \"Mentalpositive\" \\u540D\\u4E0B\\u9996\\u6B21\\u51FA\\u73B0\\u3002\\u8BE5\\u6076\\u610F\\u8F6F\\u4EF6\\u968F\\u540E\\u88AB\\u4E00\\u4F4D\\u5F00\\u53D1\\u4EBA\\u5458\\u6536\\u8D2D\\u5E76\\u663E\\u7740\\u589E\\u5F3A\\uFF0C\\u8BE5\\u5F00\\u53D1\\u4EBA\\u5458\\u5C06\\u5176\\u4ECE\\u57FA\\u672C\\u7684\\u51ED\\u636E\\u7A83\\u53D6\\u7A0B\\u5E8F\\u8F6C\\u53D8\\u4E3A\\u5177\\u6709\\u540E\\u95E8\\u529F\\u80FD\\u7684\\u7EFC\\u5408\\u5A01\\u80C1\\u3002'}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u6280\\u672F\\u67B6\\u6784\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u4E3B\\u8981\\u7EC4\\u4EF6\"}),\"\\uFF1A\\u57FA\\u4E8E C \\u7684\\u6570\\u636E\\u7A83\\u53D6\\u6A21\\u5757\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u6301\\u4E45\\u6027\\u673A\\u5236\"}),\"\\uFF1A\\u529F\\u80FD\\u9F50\\u5168\\u7684\\u57FA\\u4E8E Go \\u7684\\u540E\\u95E8\\u4EE3\\u7406\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u5206\\u53D1\\u6A21\\u5F0F\"}),\"\\uFF1A\\u6076\\u610F\\u8F6F\\u4EF6\\u5373\\u670D\\u52A1 (MaaS)\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u5F53\\u524D\\u5E02\\u573A\\u4EF7\\u683C\"}),\"\\uFF1A$1,000/\\u6708\\uFF08\\u539F\\u4EF7 $3,000\\uFF09\"]}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u516C\\u8BC1\\u7ED5\\u8FC7\\u6280\\u672F\",children:\"\\u516C\\u8BC1\\u7ED5\\u8FC7\\u6280\\u672F\"}),`\n`,(0,i.jsx)(n.p,{children:\"2025 \\u5E74 12 \\u6708\\u7684\\u53D8\\u4F53\\u4EE3\\u8868\\u4E86 macOS \\u6076\\u610F\\u8F6F\\u4EF6\\u5206\\u53D1\\u7684\\u8303\\u5F0F\\u8F6C\\u53D8\\u3002\\u653B\\u51FB\\u8005\\u4E0D\\u518D\\u4F9D\\u9760\\u793E\\u4F1A\\u5DE5\\u7A0B\\u5B66\\u6765\\u7ED5\\u8FC7\\u5B89\\u5168\\u8B66\\u544A\\uFF0C\\u800C\\u662F\\u5229\\u7528 Apple \\u81EA\\u5DF1\\u7684\\u5B89\\u5168\\u57FA\\u7840\\u8BBE\\u65BD\\u3002\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u653B\\u51FB\\u6D41\\u7A0B\\uFF1A\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"M 6,1 C 4.354992,1 3,2.354992 3,4 v 16 c 0,1.645008 1.354992,3 3,3 h 12 c 1.645008,0 3,-1.354992 3,-3 V 8 7 A 1.0001,1.0001 0 0 0 20.707031,6.2929687 l -5,-5 A 1.0001,1.0001 0 0 0 15,1 h -1 z m 0,2 h 7 v 3 c 0,1.645008 1.354992,3 3,3 h 3 v 11 c 0,0.564129 -0.435871,1 -1,1 H 6 C 5.4358712,21 5,20.564129 5,20 V 4 C 5,3.4358712 5.4358712,3 6,3 Z M 15,3.4140625 18.585937,7 H 16 C 15.435871,7 15,6.5641288 15,6 Z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"1. \\u653B\\u51FB\\u8005\\u521B\\u5EFA\\u826F\\u6027 Swift \\u5E94\\u7528\\u7A0B\\u5E8F\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"          \\u2193\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"2. \\u63D0\\u4EA4\\u7ED9 Apple \\u8FDB\\u884C\\u516C\\u8BC1\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"          \\u2193\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"3. Apple \\u7684\\u81EA\\u52A8\\u626B\\u63CF\\u6279\\u51C6\\uFF08\\u672A\\u68C0\\u6D4B\\u5230\\u6076\\u610F\\u8F6F\\u4EF6\\uFF09\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"          \\u2193\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"4. \\u653B\\u51FB\\u8005\\u6536\\u5230\\u516C\\u8BC1\\u7968\\u636E\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"          \\u2193\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"5. \\u5E26\\u6709\\u6709\\u6548\\u7B7E\\u540D\\u7684\\u5E94\\u7528\\u7A0B\\u5E8F\\u5206\\u53D1\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"          \\u2193\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"6. \\u7528\\u6237\\u4E0B\\u8F7D\\u5E76\\u6253\\u5F00\\uFF0C\\u65E0 Gatekeeper \\u8B66\\u544A\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"          \\u2193\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"7. \\u5B89\\u88C5\\u540E\\uFF0C\\u5E94\\u7528\\u7A0B\\u5E8F\\u8054\\u7CFB C2 \\u670D\\u52A1\\u5668\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"          \\u2193\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"8. \\u6076\\u610F\\u6709\\u6548\\u8F7D\\u8377\\u4EA4\\u4ED8\\u5E76\\u6267\\u884C\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"          \\u2193\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"9. \\u6570\\u636E\\u6CC4\\u9732\\u5F00\\u59CB\"})})]})})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u4E3A\\u4EC0\\u4E48\\u8FD9\\u79CD\\u653B\\u51FB\\u4F1A\\u6210\\u529F\\uFF1A\"})}),`\n`,(0,i.jsx)(n.p,{children:\"Apple \\u7684\\u516C\\u8BC1\\u6D41\\u7A0B\\u8BC4\\u4F30\\u7684\\u662F\\u63D0\\u4EA4\\u65F6\\u5B58\\u5728\\u7684\\u5185\\u5BB9\\uFF0C\\u800C\\u4E0D\\u662F\\u8FD0\\u884C\\u65F6\\u884C\\u4E3A\\u3002\\u5B89\\u5168\\u7814\\u7A76\\u5458 Jeff Johnson (Lapcat Software) \\u89E3\\u91CA\\u8BF4\\uFF1A\\u201CApple \\u7684\\u516C\\u8BC1\\u670D\\u52A1\\u626B\\u63CF\\u6076\\u610F\\u8F6F\\u4EF6\\uFF0C\\u4F46\\u6076\\u610F\\u8F6F\\u4EF6\\u4F5C\\u8005\\u4E0D\\u9700\\u8981\\u5411 Apple \\u63D0\\u4EA4\\u6076\\u610F\\u8F6F\\u4EF6\\uFF01\\u4ED6\\u4EEC\\u53EF\\u4EE5\\u63D0\\u4EA4\\u4E00\\u4E2A\\u5B8C\\u5168\\u65E0\\u8F9C\\u7684\\u5E94\\u7528\\u7A0B\\u5E8F\\u8FDB\\u884C\\u516C\\u8BC1\\u2026\\u2026Apple \\u4E0D\\u53EF\\u80FD\\u9884\\u5148\\u68C0\\u6D4B\\u5230\\u8FD9\\u4E00\\u70B9\\u3002\\u201D\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u8BE6\\u7EC6\\u611F\\u67D3\\u94FE\",children:\"\\u8BE6\\u7EC6\\u611F\\u67D3\\u94FE\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 1 \\u9636\\u6BB5\\uFF1A\\u521D\\u59CB\\u5206\\u53D1\"})}),`\n`,(0,i.jsxs)(n.p,{children:[\"\\u8BE5\\u6076\\u610F\\u8F6F\\u4EF6\\u4F5C\\u4E3A\\u540D\\u4E3A \",(0,i.jsx)(n.code,{children:\"zk-call-messenger-installer-3.9.2-lts.dmg\"}),\" \\u7684\\u78C1\\u76D8\\u6620\\u50CF\\u5206\\u53D1\\uFF0C\\u6258\\u7BA1\\u5728 \",(0,i.jsx)(n.code,{children:\"https://zkcall.net/download\"}),\"\\u3002\\u8BE5 DMG \\u6587\\u4EF6\\u4F7F\\u7528\\u8BF1\\u9975 PDF \\u6587\\u4EF6\\uFF08LibreOffice \\u76F8\\u5173\\u6587\\u6863\\uFF09\\u81A8\\u80C0\\u5230 25.5MB\\uFF0C\\u4EE5\\u663E\\u5F97\\u5408\\u6CD5\\u3002\"]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 2 \\u9636\\u6BB5\\uFF1A\\u6267\\u884C\\u524D\\u9A8C\\u8BC1\"})}),`\n`,(0,i.jsx)(n.p,{children:\"\\u6302\\u8F7D\\u540E\\uFF0C\\u4EE3\\u7801\\u7B7E\\u540D\\u7684 Swift \\u53EF\\u6267\\u884C\\u6587\\u4EF6\\u6267\\u884C\\u591A\\u9879\\u68C0\\u67E5\\uFF1A\"}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"M7.508 0c-.287 0-.573 0-.86.002-.241.002-.483.003-.724.01-.132.003-.263.009-.395.015A9.154 9.154 0 0 0 4.348.15 5.492 5.492 0 0 0 2.85.645 5.04 5.04 0 0 0 .645 2.848c-.245.48-.4.972-.495 1.5-.093.52-.122 1.05-.136 1.576a35.2 35.2 0 0 0-.012.724C0 6.935 0 7.221 0 7.508v8.984c0 .287 0 .575.002.862.002.24.005.481.012.722.014.526.043 1.057.136 1.576.095.528.25 1.02.495 1.5a5.03 5.03 0 0 0 2.205 2.203c.48.244.97.4 1.498.495.52.093 1.05.124 1.576.138.241.007.483.009.724.01.287.002.573.002.86.002h8.984c.287 0 .573 0 .86-.002.241-.001.483-.003.724-.01a10.523 10.523 0 0 0 1.578-.138 5.322 5.322 0 0 0 1.498-.495 5.035 5.035 0 0 0 2.203-2.203c.245-.48.4-.972.495-1.5.093-.52.124-1.05.138-1.576.007-.241.009-.481.01-.722.002-.287.002-.575.002-.862V7.508c0-.287 0-.573-.002-.86a33.662 33.662 0 0 0-.01-.724 10.5 10.5 0 0 0-.138-1.576 5.328 5.328 0 0 0-.495-1.5A5.039 5.039 0 0 0 21.152.645 5.32 5.32 0 0 0 19.654.15a10.493 10.493 0 0 0-1.578-.138 34.98 34.98 0 0 0-.722-.01C17.067 0 16.779 0 16.492 0H7.508zm6.035 3.41c4.114 2.47 6.545 7.162 5.549 11.131-.024.093-.05.181-.076.272l.002.001c2.062 2.538 1.5 5.258 1.236 4.745-1.072-2.086-3.066-1.568-4.088-1.043a6.803 6.803 0 0 1-.281.158l-.02.012-.002.002c-2.115 1.123-4.957 1.205-7.812-.022a12.568 12.568 0 0 1-5.64-4.838c.649.48 1.35.902 2.097 1.252 3.019 1.414 6.051 1.311 8.197-.002C9.651 12.73 7.101 9.67 5.146 7.191a10.628 10.628 0 0 1-1.005-1.384c2.34 2.142 6.038 4.83 7.365 5.576C8.69 8.408 6.208 4.743 6.324 4.86c4.436 4.47 8.528 6.996 8.528 6.996.154.085.27.154.36.213.085-.215.16-.437.224-.668.708-2.588-.09-5.548-1.893-7.992z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"// \\u6267\\u884C\\u524D\\u68C0\\u67E5\\u7684\\u7B80\\u5316\\u8868\\u793A\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\"func\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\" checkInternet\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"() \"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\"->\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" Bool\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\" {\"})]}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"    // \\u9A8C\\u8BC1\\u7F51\\u7EDC\\u8FDE\\u63A5\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"    // \\u907F\\u514D\\u5728\\u6C99\\u76D2/\\u79BB\\u7EBF\\u73AF\\u5883\\u4E2D\\u6267\\u884C\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"}\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\"}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\"func\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\" checkRateLimit\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"() \"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\"->\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" Bool\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\" {\"})]}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"    // \\u5F3A\\u5236\\u6267\\u884C\\u4E24\\u6B21\\u6267\\u884C\\u4E4B\\u95F4 3600 \\u79D2\\u7684\\u6700\\u5C0F\\u95F4\\u9694\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"    // \\u9632\\u6B62\\u901A\\u8FC7\\u91CD\\u590D\\u8FD0\\u884C\\u8FDB\\u884C\\u5206\\u6790\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#24292E\",\"--shiki-dark\":\"#E1E4E8\"},children:\"}\"})})]})})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 3 \\u9636\\u6BB5\\uFF1A\\u6709\\u6548\\u8F7D\\u8377\\u68C0\\u7D22\"})}),`\n`,(0,i.jsx)(n.p,{children:\"\\u5982\\u679C\\u68C0\\u67E5\\u901A\\u8FC7\\uFF0C\\u5E94\\u7528\\u7A0B\\u5E8F\\u5C06\\uFF1A\"}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsxs)(n.li,{children:[\"\\u4ECE \",(0,i.jsx)(n.code,{children:\"gatemaden.space\"}),\" \\u83B7\\u53D6\\u6DF7\\u6DC6\\u7684 bash \\u811A\\u672C\"]}),`\n`,(0,i.jsxs)(n.li,{children:[\"\\u5C06\\u811A\\u672C\\u5199\\u5165 \",(0,i.jsx)(n.code,{children:\"/tmp/runner\"}),\" \\u5E76\\u8D4B\\u4E88\\u53EF\\u6267\\u884C\\u6743\\u9650\"]}),`\n`,(0,i.jsx)(n.li,{children:\"\\u901A\\u8FC7\\u6587\\u4EF6\\u7C7B\\u578B\\u68C0\\u67E5\\u9A8C\\u8BC1\\u811A\\u672C\\u771F\\u5B9E\\u6027\"}),`\n`,(0,i.jsx)(n.li,{children:`\\u9884\\u671F\\u7ED3\\u679C\\uFF1A\"Paul Falstad's zsh script text executable\"`}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 4 \\u9636\\u6BB5\\uFF1A\\u6709\\u6548\\u8F7D\\u8377\\u6267\\u884C\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u89E3\\u7801\\u540E\\u7684\\u6709\\u6548\\u8F7D\\u8377\\u6267\\u884C\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"base64\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -D\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\" |\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\" gunzip\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\" |\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\" /bin/zsh\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -lc\"})]}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u8BC4\\u4F30 daemon_function() \\u4F8B\\u7A0B\"})})]})})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 5 \\u9636\\u6BB5\\uFF1A\\u6570\\u636E\\u6CC4\\u9732\"})}),`\n`,(0,i.jsxs)(n.p,{children:[\"\\u6076\\u610F\\u8F6F\\u4EF6\\u4E0E \",(0,i.jsx)(n.code,{children:\"focusgroovy.com\"}),\" \\u901A\\u4FE1\\u4EE5\\u8FDB\\u884C\\u51ED\\u636E\\u7A83\\u53D6\\u64CD\\u4F5C\\uFF1A\"]}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u663E\\u793A\\u865A\\u5047\\u5BC6\\u7801\\u63D0\\u793A\\u4EE5\\u6536\\u96C6\\u7CFB\\u7EDF\\u51ED\\u636E\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u90E8\\u7F72\\u57FA\\u4E8E Go \\u7684\\u540E\\u95E8\\u4EE5\\u8FDB\\u884C\\u6301\\u4E45\\u8BBF\\u95EE\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5C06\\u6536\\u96C6\\u7684\\u6570\\u636E\\u6CC4\\u9732\\u5230\\u547D\\u4EE4\\u548C\\u63A7\\u5236\\u57FA\\u7840\\u8BBE\\u65BD\"}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u9003\\u907F\\u6280\\u672F\",children:\"\\u9003\\u907F\\u6280\\u672F\"}),`\n`,(0,i.jsx)(n.p,{children:\"MacSync Stealer \\u91C7\\u7528\\u591A\\u79CD\\u590D\\u6742\\u7684\\u9003\\u907F\\u673A\\u5236\\uFF1A\"}),`\n`,(0,i.jsxs)(n.table,{children:[(0,i.jsx)(n.thead,{children:(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.th,{children:\"\\u6280\\u672F\"}),(0,i.jsx)(n.th,{children:\"\\u76EE\\u7684\"})]})}),(0,i.jsxs)(n.tbody,{children:[(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"\\u5E26\\u6709\\u8BF1\\u9975\\u6587\\u4EF6\\u7684 DMG \\u81A8\\u80C0\"}),(0,i.jsx)(n.td,{children:\"\\u663E\\u5F97\\u5408\\u6CD5\\uFF0C\\u7ED5\\u8FC7\\u6587\\u4EF6\\u5927\\u5C0F\\u542F\\u53D1\\u5F0F\\u68C0\\u6D4B\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"\\u5185\\u5B58\\u4E2D\\u6267\\u884C\"}),(0,i.jsx)(n.td,{children:\"\\u6700\\u5C0F\\u5316\\u78C1\\u76D8\\u4F2A\\u5F71\\u4EE5\\u4FBF\\u53D6\\u8BC1\\u5206\\u6790\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"\\u4E92\\u8054\\u7F51\\u8FDE\\u63A5\\u68C0\\u67E5\"}),(0,i.jsx)(n.td,{children:\"\\u907F\\u514D\\u6C99\\u76D2\\u5206\\u6790\\u73AF\\u5883\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Quarantine \\u5C5E\\u6027\\u79FB\\u9664\"}),(0,i.jsx)(n.td,{children:\"\\u7ED5\\u8FC7 macOS \\u5B89\\u5168\\u6807\\u5FD7\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsxs)(n.td,{children:[\"\\u901A\\u8FC7 \",(0,i.jsx)(n.code,{children:\"/usr/bin/file\"}),\" \\u9A8C\\u8BC1\\u811A\\u672C\"]}),(0,i.jsx)(n.td,{children:\"\\u786E\\u4FDD\\u6709\\u6548\\u8F7D\\u8377\\u5B8C\\u6574\\u6027\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsxs)(n.td,{children:[\"\\u4FEE\\u6539 curl \\u6807\\u5FD7 (\",(0,i.jsx)(n.code,{children:\"-fL\"}),\", \",(0,i.jsx)(n.code,{children:\"-sS\"}),\", \",(0,i.jsx)(n.code,{children:\"--noproxy\"}),\")\"]}),(0,i.jsx)(n.td,{children:\"\\u9003\\u907F\\u7F51\\u7EDC\\u76D1\\u63A7\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"\\u901F\\u7387\\u9650\\u5236\\uFF083600\\u79D2\\u95F4\\u9694\\uFF09\"}),(0,i.jsx)(n.td,{children:\"\\u9632\\u6B62\\u81EA\\u52A8\\u5206\\u6790\"})]})]})]}),`\n`,(0,i.jsx)(n.h2,{id:\"macsync-stealer-\\u9488\\u5BF9\\u54EA\\u4E9B\\u6570\\u636E\",children:\"MacSync Stealer \\u9488\\u5BF9\\u54EA\\u4E9B\\u6570\\u636E\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u6D4F\\u89C8\\u5668\\u51ED\\u636E\\u548C\\u6570\\u636E\",children:\"\\u6D4F\\u89C8\\u5668\\u51ED\\u636E\\u548C\\u6570\\u636E\"}),`\n`,(0,i.jsx)(n.p,{children:\"MacSync Stealer \\u9488\\u5BF9\\u6BCF\\u4E00\\u4E2A\\u4E3B\\u8981\\u7684\\u57FA\\u4E8E Chromium \\u7684\\u6D4F\\u89C8\\u5668\\uFF1A\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u76EE\\u6807\\u6D4F\\u89C8\\u5668\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"Google Chrome (\\u5305\\u62EC Beta, Dev, Canary)\"}),`\n`,(0,i.jsx)(n.li,{children:\"Brave Browser\"}),`\n`,(0,i.jsx)(n.li,{children:\"Microsoft Edge\"}),`\n`,(0,i.jsx)(n.li,{children:\"Vivaldi\"}),`\n`,(0,i.jsx)(n.li,{children:\"Opera / Opera GX\"}),`\n`,(0,i.jsx)(n.li,{children:\"Yandex Browser\"}),`\n`,(0,i.jsx)(n.li,{children:\"Arc Browser\"}),`\n`,(0,i.jsx)(n.li,{children:\"Chromium\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u63D0\\u53D6\\u7684\\u6570\\u636E\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u4FDD\\u5B58\\u7684\\u5BC6\\u7801\\u548C\\u767B\\u5F55\\u51ED\\u636E\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u6D4F\\u89C8\\u5668 Cookie\\uFF08\\u7528\\u4E8E\\u8D26\\u6237\\u63A5\\u7BA1\\u7684\\u4F1A\\u8BDD\\u4EE4\\u724C\\uFF09\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u8868\\u5355\\u81EA\\u52A8\\u586B\\u5145\\u6570\\u636E\\uFF08\\u5730\\u5740\\u3001\\u4FE1\\u7528\\u5361\\uFF09\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u6D4F\\u89C8\\u5386\\u53F2\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u6269\\u5C55\\u7A0B\\u5E8F\\u7684\\u673A\\u5BC6\\u548C\\u914D\\u7F6E\"}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u52A0\\u5BC6\\u8D27\\u5E01\\u94B1\\u5305\",children:\"\\u52A0\\u5BC6\\u8D27\\u5E01\\u94B1\\u5305\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u8BE5\\u6076\\u610F\\u8F6F\\u4EF6\\u4E13\\u95E8\\u9488\\u5BF9\\u52A0\\u5BC6\\u8D27\\u5E01\\u8D44\\u4EA7\\uFF0C\\u53CD\\u6620\\u4E86\\u6B64\\u7C7B\\u6570\\u636E\\u7684\\u9AD8\\u4EF7\\u503C\\u6027\\u8D28\\uFF1A\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u72EC\\u7ACB\\u94B1\\u5305\\u5E94\\u7528\\u7A0B\\u5E8F\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"Exodus\"}),`\n`,(0,i.jsx)(n.li,{children:\"Electrum\"}),`\n`,(0,i.jsx)(n.li,{children:\"Atomic Wallet\"}),`\n`,(0,i.jsx)(n.li,{children:\"Guarda\"}),`\n`,(0,i.jsx)(n.li,{children:\"Coinomi\"}),`\n`,(0,i.jsx)(n.li,{children:\"Sparrow\"}),`\n`,(0,i.jsx)(n.li,{children:\"Wasabi\"}),`\n`,(0,i.jsx)(n.li,{children:\"Bitcoin Core\"}),`\n`,(0,i.jsx)(n.li,{children:\"Litecoin Core\"}),`\n`,(0,i.jsx)(n.li,{children:\"Dash Core\"}),`\n`,(0,i.jsx)(n.li,{children:\"Dogecoin Core\"}),`\n`,(0,i.jsx)(n.li,{children:\"BlueWallet\"}),`\n`,(0,i.jsx)(n.li,{children:\"Zengo\"}),`\n`,(0,i.jsx)(n.li,{children:\"Trust Wallet\"}),`\n`,(0,i.jsx)(n.li,{children:\"Ledger Live\"}),`\n`,(0,i.jsx)(n.li,{children:\"Trezor Suite\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u57FA\\u4E8E\\u6D4F\\u89C8\\u5668\\u7684\\u94B1\\u5305\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"MetaMask\"}),`\n`,(0,i.jsx)(n.li,{children:\"Coinbase Wallet\"}),`\n`,(0,i.jsx)(n.li,{children:\"Phantom\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5176\\u4ED6\\u6D4F\\u89C8\\u5668\\u6269\\u5C55\\u94B1\\u5305\"}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u7CFB\\u7EDF\\u548C\\u5E94\\u7528\\u7A0B\\u5E8F\\u6570\\u636E\",children:\"\\u7CFB\\u7EDF\\u548C\\u5E94\\u7528\\u7A0B\\u5E8F\\u6570\\u636E\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"Keychain \\u8BBF\\u95EE\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"iCloud Keychain \\u51ED\\u636E\"}),`\n`,(0,i.jsx)(n.li,{children:\"Wi-Fi \\u5BC6\\u7801\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5E94\\u7528\\u7A0B\\u5E8F\\u5BC6\\u7801\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5B58\\u50A8\\u7684\\u8BC1\\u4E66\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u901A\\u4FE1\\u5E94\\u7528\\u7A0B\\u5E8F\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"Telegram \\u4F1A\\u8BDD\\u6570\\u636E\\uFF08\\u542F\\u7528\\u5B8C\\u5168\\u8D26\\u6237\\u63A5\\u7BA1\\uFF09\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u6D88\\u606F\\u5E94\\u7528\\u7A0B\\u5E8F\\u51ED\\u636E\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7CFB\\u7EDF\\u4FE1\\u606F\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u786C\\u4EF6\\u89C4\\u683C\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5DF2\\u5B89\\u88C5\\u5E94\\u7528\\u7A0B\\u5E8F\\u5217\\u8868\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u7F51\\u7EDC\\u914D\\u7F6E\"}),`\n`,(0,i.jsx)(n.li,{children:\"macOS \\u7248\\u672C\\u548C\\u7CFB\\u7EDF\\u5143\\u6570\\u636E\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u4E2A\\u4EBA\\u6587\\u4EF6\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u6587\\u6863\\u548C\\u56FE\\u50CF\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u516C\\u53F8/\\u4E1A\\u52A1\\u6570\\u636E\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u914D\\u7F6E\\u6587\\u4EF6\"}),`\n`]}),`\n`,(0,i.jsx)(n.h2,{id:\"\\u5165\\u4FB5\\u6307\\u6807-iocs\",children:\"\\u5165\\u4FB5\\u6307\\u6807 (IOCs)\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u6587\\u4EF6\\u54C8\\u5E0C-sha256\",children:\"\\u6587\\u4EF6\\u54C8\\u5E0C (SHA256)\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u78C1\\u76D8\\u6620\\u50CF\\uFF1A\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"M 6,1 C 4.354992,1 3,2.354992 3,4 v 16 c 0,1.645008 1.354992,3 3,3 h 12 c 1.645008,0 3,-1.354992 3,-3 V 8 7 A 1.0001,1.0001 0 0 0 20.707031,6.2929687 l -5,-5 A 1.0001,1.0001 0 0 0 15,1 h -1 z m 0,2 h 7 v 3 c 0,1.645008 1.354992,3 3,3 h 3 v 11 c 0,0.564129 -0.435871,1 -1,1 H 6 C 5.4358712,21 5,20.564129 5,20 V 4 C 5,3.4358712 5.4358712,3 6,3 Z M 15,3.4140625 18.585937,7 H 16 C 15.435871,7 15,6.5641288 15,6 Z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"zk-call-messenger-installer-3.9.2-lts.dmg:\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"be961ec5b9f4cc501ed5d5b8974b730dabcdf7e279ed4a8c037c67b5b935d51a\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"co.runtime.helper.b3f9a2.dmg:\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"4ae745bc0e4631f676b3d0a05d5c74e37bdfc8da3076208b24e73e5bbea9178f\"})})]})})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"Mach-O \\u53EF\\u6267\\u884C\\u6587\\u4EF6 (runtimectl)\\uFF1A\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"M 6,1 C 4.354992,1 3,2.354992 3,4 v 16 c 0,1.645008 1.354992,3 3,3 h 12 c 1.645008,0 3,-1.354992 3,-3 V 8 7 A 1.0001,1.0001 0 0 0 20.707031,6.2929687 l -5,-5 A 1.0001,1.0001 0 0 0 15,1 h -1 z m 0,2 h 7 v 3 c 0,1.645008 1.354992,3 3,3 h 3 v 11 c 0,0.564129 -0.435871,1 -1,1 H 6 C 5.4358712,21 5,20.564129 5,20 V 4 C 5,3.4358712 5.4358712,3 6,3 Z M 15,3.4140625 18.585937,7 H 16 C 15.435871,7 15,6.5641288 15,6 Z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"ecfaa20f25e11878686249c7094706bc3dcd2dc0ace0f2932a39d1bfdac85863\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"7cfe0b119e616ac81ddb1767a5c7f40bec67d91fdd66e53490c0225789537073\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"06c74829d8eee3c47e17d01c41361d314f12277d899cc9dfa789fe767c03693e\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"c4d3e5cdb264eded917cd61b8131c40715c0ee3f4d2c94c84d60fa295ca4ed97\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"9990457feac0cd85f450e60c268ddf5789ed4ac81022b0d7c3021d7208ebccd3\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"9d43e059111460c4f81351a062fb7eb7dbfd34988a06d756c7206f330c06cb42\"})})]})})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u6709\\u6548\\u8F7D\\u8377\\u811A\\u672C (runner)\\uFF1A\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"M 6,1 C 4.354992,1 3,2.354992 3,4 v 16 c 0,1.645008 1.354992,3 3,3 h 12 c 1.645008,0 3,-1.354992 3,-3 V 8 7 A 1.0001,1.0001 0 0 0 20.707031,6.2929687 l -5,-5 A 1.0001,1.0001 0 0 0 15,1 h -1 z m 0,2 h 7 v 3 c 0,1.645008 1.354992,3 3,3 h 3 v 11 c 0,0.564129 -0.435871,1 -1,1 H 6 C 5.4358712,21 5,20.564129 5,20 V 4 C 5,3.4358712 5.4358712,3 6,3 Z M 15,3.4140625 18.585937,7 H 16 C 15.435871,7 15,6.5641288 15,6 Z\" fill=\"currentColor\" /></svg>',children:(0,i.jsx)(n.code,{children:(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{children:\"2e671bd9673d174de9b4ad8fd03049859e1d2d17ac9bc49ecc5d736505002937\"})})})})}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u7F51\\u7EDC\\u6307\\u6807\",children:\"\\u7F51\\u7EDC\\u6307\\u6807\"}),`\n`,(0,i.jsxs)(n.table,{children:[(0,i.jsx)(n.thead,{children:(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.th,{children:\"\\u6307\\u6807\\u7C7B\\u578B\"}),(0,i.jsx)(n.th,{children:\"\\u503C\"})]})}),(0,i.jsxs)(n.tbody,{children:[(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"User Agent\"}),(0,i.jsx)(n.td,{children:(0,i.jsx)(n.code,{children:\"UserSyncWorker/1.0 (macOS)\"})})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"C2 Domain\"}),(0,i.jsx)(n.td,{children:(0,i.jsx)(n.code,{children:\"focusgroovy.com\"})})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Payload Domain\"}),(0,i.jsx)(n.td,{children:(0,i.jsx)(n.code,{children:\"gatemaden.space\"})})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Distribution Domain\"}),(0,i.jsx)(n.td,{children:(0,i.jsx)(n.code,{children:\"zkcall.net\"})})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Developer Team ID\"}),(0,i.jsx)(n.td,{children:\"GNJLS3UYZ4 (\\u5DF2\\u64A4\\u9500)\"})]})]})]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u6587\\u4EF6\\u7CFB\\u7EDF\\u6307\\u6807\",children:\"\\u6587\\u4EF6\\u7CFB\\u7EDF\\u6307\\u6807\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u4E34\\u65F6\\u6587\\u4EF6\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.code,{children:\"/tmp/runner\"}),\" (\\u4E34\\u65F6\\u6709\\u6548\\u8F7D\\u8377)\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.code,{children:\"/tmp/runner.headers\"}),\" (\\u5934\\u90E8\\u7F13\\u5B58)\"]}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u6301\\u4E45\\u6027\\u4F4D\\u7F6E\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:(0,i.jsx)(n.code,{children:\"~/Library/Logs/UserSyncWorker.log\"})}),`\n`,(0,i.jsx)(n.li,{children:(0,i.jsx)(n.code,{children:\"~/Library/Application Support/UserSyncWorker/\"})}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u8BA1\\u65F6\\u8DDF\\u8E2A\\u5668\\u6587\\u4EF6\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:(0,i.jsx)(n.code,{children:\"last_up\"})}),`\n`,(0,i.jsx)(n.li,{children:(0,i.jsx)(n.code,{children:\"gate\"})}),`\n`,(0,i.jsx)(n.li,{children:(0,i.jsx)(n.code,{children:\"last_update\"})}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u65E5\\u5FD7\\u6A21\\u5F0F\",children:\"\\u65E5\\u5FD7\\u6A21\\u5F0F\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u5728\\u7CFB\\u7EDF\\u65E5\\u5FD7\\u4E2D\\u67E5\\u627E\\u8FD9\\u4E9B\\u6A21\\u5F0F\\uFF1A\"}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:'\"Starting update...\"'}),`\n`,(0,i.jsx)(n.li,{children:'\"rate-limit: defer\"'}),`\n`,(0,i.jsx)(n.li,{children:'\"preflight: internet=\"'}),`\n`]}),`\n`,(0,i.jsx)(n.h2,{id:\"\\u68C0\\u6D4B\\u65B9\\u6CD5\",children:\"\\u68C0\\u6D4B\\u65B9\\u6CD5\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u4F7F\\u7528-activity-monitor\\u6D3B\\u52A8\\u76D1\\u89C6\\u5668\",children:\"\\u4F7F\\u7528 Activity Monitor\\uFF08\\u6D3B\\u52A8\\u76D1\\u89C6\\u5668\\uFF09\"}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsxs)(n.li,{children:[\"\\u6253\\u5F00 \",(0,i.jsx)(n.strong,{children:\"Applications > Utilities > Activity Monitor\"})]}),`\n`,(0,i.jsxs)(n.li,{children:[\"\\u70B9\\u51FB \",(0,i.jsx)(n.strong,{children:\"CPU\"}),\" \\u6807\\u7B7E\\u5E76\\u6309 \",(0,i.jsx)(n.strong,{children:\"%CPU\"}),\" \\u4F7F\\u7528\\u7387\\u6392\\u5E8F\"]}),`\n`,(0,i.jsx)(n.li,{children:\"\\u67E5\\u627E\\u6D88\\u8017\\u9AD8\\u8D44\\u6E90\\u7684\\u964C\\u751F\\u8FDB\\u7A0B\"}),`\n`,(0,i.jsx)(n.li,{children:'\\u68C0\\u67E5\\u540D\\u4E3A\\u7C7B\\u4F3C \"UserSyncWorker\" \\u7684\\u8FDB\\u7A0B'}),`\n`,(0,i.jsxs)(n.li,{children:[\"\\u9009\\u62E9\\u53EF\\u7591\\u8FDB\\u7A0B\\u5E76\\u70B9\\u51FB \",(0,i.jsx)(n.strong,{children:\"'i'\"}),\" \\u83B7\\u53D6\\u66F4\\u591A\\u4FE1\\u606F\"]}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.img,{alt:\"Activity Monitor Detection\",src:\"/images/blog/macsync-stealer-security-guide-2025/terminal-code-screen.jpg\",width:\"2400\",height:\"1600\"})}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u7528\\u4E8E\\u68C0\\u6D4B\\u7684\\u7EC8\\u7AEF\\u547D\\u4EE4\",children:\"\\u7528\\u4E8E\\u68C0\\u6D4B\\u7684\\u7EC8\\u7AEF\\u547D\\u4EE4\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u68C0\\u67E5\\u7F51\\u7EDC\\u8FDE\\u63A5\\uFF1A\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u67E5\\u770B\\u6D3B\\u52A8\\u7F51\\u7EDC\\u8FDE\\u63A5\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"netstat\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -an\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\" |\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\" grep\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" ESTABLISHED\"})]}),`\n`,(0,i.jsx)(n.span,{className:\"line\"}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u5217\\u51FA\\u5177\\u6709\\u7F51\\u7EDC\\u8FDE\\u63A5\\u7684\\u8FDB\\u7A0B\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"lsof\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -i\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -P\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\" |\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\" grep\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" ESTABLISHED\"})]})]})})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u68C0\\u67E5\\u8FD0\\u884C\\u4E2D\\u7684\\u5B88\\u62A4\\u8FDB\\u7A0B\\uFF1A\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u5217\\u51FA\\u6240\\u6709\\u8FD0\\u884C\\u4E2D\\u7684\\u4EE3\\u7406\\u548C\\u5B88\\u62A4\\u8FDB\\u7A0B\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"launchctl\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" list\"})]}),`\n`,(0,i.jsx)(n.span,{className:\"line\"}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u68C0\\u67E5\\u53EF\\u7591\\u7684 XPC \\u670D\\u52A1\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"launchctl\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" print\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" system\"})]})]})})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u68C0\\u67E5\\u4EE5\\u524D\\u7684\\u767B\\u5F55\\uFF1A\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u67E5\\u770B\\u767B\\u5F55\\u5386\\u53F2\\u8BB0\\u5F55\\u4EE5\\u67E5\\u627E\\u672A\\u6388\\u6743\\u8BBF\\u95EE\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"last\"})})]})})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u641C\\u7D22 IOC \\u6587\\u4EF6\\uFF1A\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u68C0\\u67E5 MacSync \\u7279\\u5B9A\\u6587\\u4EF6\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"ls\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -la\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" /tmp/runner\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\"*\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\" 2>\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\"/dev/null\"})]}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"ls\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -la\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" ~/Library/Logs/UserSyncWorker.log\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\" 2>\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\"/dev/null\"})]}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"ls\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -la\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" ~/Library/Application\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\"\\\\ \"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\"Support/UserSyncWorker/\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#D73A49\",\"--shiki-dark\":\"#F97583\"},children:\" 2>\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\"/dev/null\"})]})]})})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u68C0\\u67E5 LaunchAgents\\uFF1A\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u5217\\u51FA\\u7528\\u6237 LaunchAgents\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"ls\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -la\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" ~/Library/LaunchAgents/\"})]}),`\n`,(0,i.jsx)(n.span,{className:\"line\"}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u5217\\u51FA\\u7CFB\\u7EDF LaunchAgents\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"ls\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -la\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" /Library/LaunchAgents/\"})]}),`\n`,(0,i.jsx)(n.span,{className:\"line\"}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u5217\\u51FA LaunchDaemons\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"ls\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -la\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" /Library/LaunchDaemons/\"})]})]})})}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u6740\\u6BD2\\u8F6F\\u4EF6\\u68C0\\u6D4B\\u540D\\u79F0\",children:\"\\u6740\\u6BD2\\u8F6F\\u4EF6\\u68C0\\u6D4B\\u540D\\u79F0\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u4E0D\\u540C\\u7684\\u5B89\\u5168\\u4F9B\\u5E94\\u5546\\u53EF\\u80FD\\u4F1A\\u4EE5\\u4E0D\\u540C\\u7684\\u540D\\u79F0\\u68C0\\u6D4B MacSync Stealer\\uFF1A\"}),`\n`,(0,i.jsxs)(n.table,{children:[(0,i.jsx)(n.thead,{children:(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.th,{children:\"\\u4F9B\\u5E94\\u5546\"}),(0,i.jsx)(n.th,{children:\"\\u68C0\\u6D4B\\u540D\\u79F0\"})]})}),(0,i.jsxs)(n.tbody,{children:[(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Avast\"}),(0,i.jsx)(n.td,{children:\"MacOS:Agent-AYE [PUP]\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Combo Cleaner\"}),(0,i.jsx)(n.td,{children:\"Trojan.GenericKD.77251890\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Kaspersky\"}),(0,i.jsx)(n.td,{children:\"HEUR:Trojan.OSX.Agent.gen\"})]})]})]}),`\n`,(0,i.jsx)(n.h2,{id:\"\\u79FB\\u9664\\u6307\\u5357\",children:\"\\u79FB\\u9664\\u6307\\u5357\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u7ACB\\u5373\\u54CD\\u5E94\\u6B65\\u9AA4\",children:\"\\u7ACB\\u5373\\u54CD\\u5E94\\u6B65\\u9AA4\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 1 \\u6B65\\uFF1A\\u65AD\\u5F00\\u7F51\\u7EDC\\u8FDE\\u63A5\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u4ECE\\u7EC8\\u7AEF\\u7981\\u7528 Wi-Fi\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"networksetup\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -setairportpower\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" en0\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" off\"})]})]})})}),`\n`,(0,i.jsx)(n.p,{children:\"\\u6216\\u624B\\u52A8\\u64CD\\u4F5C\\uFF1A\\u70B9\\u51FB Wi-Fi \\u56FE\\u6807 > \\u5173\\u95ED Wi-Fi\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u62D4\\u6389\\u4EE5\\u592A\\u7F51\\u7535\\u7F06\\u4EE5\\u9632\\u6B62\\u8FDB\\u4E00\\u6B65\\u7684\\u6570\\u636E\\u6CC4\\u9732\\u3002\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 2 \\u6B65\\uFF1A\\u542F\\u52A8\\u8FDB\\u5165\\u5B89\\u5168\\u6A21\\u5F0F\"})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.em,{children:\"\\u5BF9\\u4E8E Apple Silicon Mac\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u5173\\u95ED Mac\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u6309\\u4F4F\\u7535\\u6E90\\u6309\\u94AE\\u76F4\\u5230\\u51FA\\u73B0\\u201C\\u6B63\\u5728\\u52A0\\u8F7D\\u542F\\u52A8\\u9009\\u9879\\u201D\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u9009\\u62E9\\u60A8\\u7684\\u5377\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u6309\\u4F4F Shift \\u952E\\uFF0C\\u7136\\u540E\\u70B9\\u51FB\\u201C\\u5728\\u5B89\\u5168\\u6A21\\u5F0F\\u4E0B\\u7EE7\\u7EED\\u201D\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.em,{children:\"\\u5BF9\\u4E8E Intel Mac\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u91CD\\u542F Mac\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u7ACB\\u5373\\u6309\\u4F4F Shift \\u952E\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5F53\\u767B\\u5F55\\u7A97\\u53E3\\u51FA\\u73B0\\u65F6\\u91CA\\u653E\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 3 \\u6B65\\uFF1A\\u79FB\\u9664\\u53EF\\u7591\\u6587\\u4EF6\"})}),`\n`,(0,i.jsx)(i.Fragment,{children:(0,i.jsx)(n.pre,{className:\"shiki shiki-themes github-light github-dark\",style:{\"--shiki-light\":\"#24292e\",\"--shiki-dark\":\"#e1e4e8\",\"--shiki-light-bg\":\"#fff\",\"--shiki-dark-bg\":\"#24292e\"},tabIndex:\"0\",icon:'<svg viewBox=\"0 0 24 24\"><path d=\"m 4,4 a 1,1 0 0 0 -0.7070312,0.2929687 1,1 0 0 0 0,1.4140625 L 8.5859375,11 3.2929688,16.292969 a 1,1 0 0 0 0,1.414062 1,1 0 0 0 1.4140624,0 l 5.9999998,-6 a 1.0001,1.0001 0 0 0 0,-1.414062 L 4.7070312,4.2929687 A 1,1 0 0 0 4,4 Z m 8,14 a 1,1 0 0 0 -1,1 1,1 0 0 0 1,1 h 8 a 1,1 0 0 0 1,-1 1,1 0 0 0 -1,-1 z\" fill=\"currentColor\" /></svg>',children:(0,i.jsxs)(n.code,{children:[(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u79FB\\u9664\\u5DF2\\u77E5\\u7684 MacSync \\u6587\\u4EF6\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"rm\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -rf\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" /tmp/runner\"})]}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"rm\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -rf\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" /tmp/runner.headers\"})]}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"rm\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -rf\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" ~/Library/Logs/UserSyncWorker.log\"})]}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"rm\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -rf\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" ~/Library/Application\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\"\\\\ \"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\"Support/UserSyncWorker/\"})]}),`\n`,(0,i.jsx)(n.span,{className:\"line\"}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u68C0\\u67E5\\u5E76\\u79FB\\u9664\\u53EF\\u7591\\u7684 LaunchAgents\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u9996\\u5148\\uFF0C\\u5217\\u51FA\\u5B83\\u4EEC\\u4EE5\\u8BC6\\u522B\\u53EF\\u7591\\u6761\\u76EE\"})}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"ls\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -la\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" ~/Library/LaunchAgents/\"})]}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"ls\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -la\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" /Library/LaunchAgents/\"})]}),`\n`,(0,i.jsxs)(n.span,{className:\"line\",children:[(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6F42C1\",\"--shiki-dark\":\"#B392F0\"},children:\"ls\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#005CC5\",\"--shiki-dark\":\"#79B8FF\"},children:\" -la\"}),(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#032F62\",\"--shiki-dark\":\"#9ECBFF\"},children:\" /Library/LaunchDaemons/\"})]}),`\n`,(0,i.jsx)(n.span,{className:\"line\"}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# \\u79FB\\u9664\\u4EFB\\u4F55\\u53EF\\u7591\\u7684 .plist \\u6587\\u4EF6\\uFF08\\u66FF\\u6362\\u4E3A\\u5B9E\\u9645\\u6587\\u4EF6\\u540D\\uFF09\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# launchctl unload ~/Library/LaunchAgents/suspicious.plist\"})}),`\n`,(0,i.jsx)(n.span,{className:\"line\",children:(0,i.jsx)(n.span,{style:{\"--shiki-light\":\"#6A737D\",\"--shiki-dark\":\"#6A737D\"},children:\"# rm ~/Library/LaunchAgents/suspicious.plist\"})})]})})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 4 \\u6B65\\uFF1A\\u5BA1\\u67E5\\u767B\\u5F55\\u9879\"})}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsxs)(n.li,{children:[\"\\u6253\\u5F00 \",(0,i.jsx)(n.strong,{children:\"\\u7CFB\\u7EDF\\u8BBE\\u7F6E > \\u901A\\u7528 > \\u767B\\u5F55\\u9879\"})]}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5BA1\\u67E5\\u6240\\u6709\\u5217\\u51FA\\u7684\\u5E94\\u7528\\u7A0B\\u5E8F\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u70B9\\u51FB\\u51CF\\u53F7 (-) \\u6309\\u94AE\\u79FB\\u9664\\u4EFB\\u4F55\\u65E0\\u6CD5\\u8BC6\\u522B\\u7684\\u6761\\u76EE\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 5 \\u6B65\\uFF1A\\u91CD\\u7F6E\\u6D4F\\u89C8\\u5668\"})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.em,{children:\"\\u5BF9\\u4E8E Chrome\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u6253\\u5F00 Chrome > \\u8BBE\\u7F6E > \\u91CD\\u7F6E\\u8BBE\\u7F6E\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u70B9\\u51FB\\u201C\\u5C06\\u8BBE\\u7F6E\\u6062\\u590D\\u4E3A\\u539F\\u59CB\\u9ED8\\u8BA4\\u8BBE\\u7F6E\\u201D\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u70B9\\u51FB\\u201C\\u91CD\\u7F6E\\u8BBE\\u7F6E\\u201D\\u786E\\u8BA4\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.em,{children:\"\\u5BF9\\u4E8E Safari\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsx)(n.li,{children:\"Safari > \\u8BBE\\u7F6E > \\u9690\\u79C1 > \\u7BA1\\u7406\\u7F51\\u7AD9\\u6570\\u636E\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5168\\u90E8\\u79FB\\u9664\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u6E05\\u9664\\u5386\\u53F2\\u8BB0\\u5F55\\uFF1ASafari > \\u6E05\\u9664\\u5386\\u53F2\\u8BB0\\u5F55 > \\u6240\\u6709\\u5386\\u53F2\\u8BB0\\u5F55\"}),`\n`]}),`\n`,(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.em,{children:\"\\u5BF9\\u4E8E\\u5176\\u4ED6\\u6D4F\\u89C8\\u5668\\uFF1A\"}),`\n\\u5728\\u6BCF\\u4E2A\\u6D4F\\u89C8\\u5668\\u7684\\u8BBE\\u7F6E\\u4E2D\\u9075\\u5FAA\\u7C7B\\u4F3C\\u7684\\u91CD\\u7F6E\\u7A0B\\u5E8F\\u3002`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 6 \\u6B65\\uFF1A\\u8FD0\\u884C\\u53CD\\u6076\\u610F\\u8F6F\\u4EF6\\u626B\\u63CF\"})}),`\n`,(0,i.jsx)(n.p,{children:\"\\u63A8\\u8350\\u5DE5\\u5177\\uFF1A\"}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"Combo Cleaner\"}),\"\\uFF1A\\u5168\\u9762\\u7684 Mac \\u6076\\u610F\\u8F6F\\u4EF6\\u79FB\\u9664\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"Malwarebytes for Mac\"}),\"\\uFF1A\\u514D\\u8D39\\u626B\\u63CF\\uFF0C\\u4ED8\\u8D39\\u79FB\\u9664\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"Moonlock\"}),\"\\uFF1A\\u8F7B\\u91CF\\u7EA7 Mac \\u539F\\u751F\\u4FDD\\u62A4\"]}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7B2C 7 \\u6B65\\uFF1A\\u66F4\\u6539\\u6240\\u6709\\u51ED\\u636E\"})}),`\n`,(0,i.jsx)(n.p,{children:\"\\u79FB\\u9664\\u540E\\uFF0C\\u7ACB\\u5373\\uFF1A\"}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u66F4\\u6539\\u5B58\\u50A8\\u5728\\u6D4F\\u89C8\\u5668\\u6216 Keychain \\u4E2D\\u7684\\u6240\\u6709\\u5BC6\\u7801\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u64A4\\u9500\\u5E76\\u91CD\\u65B0\\u751F\\u6210 2FA \\u4EE4\\u724C\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5C06\\u52A0\\u5BC6\\u8D27\\u5E01\\u8F6C\\u79FB\\u5230\\u5177\\u6709\\u65B0\\u52A9\\u8BB0\\u8BCD\\u7684\\u65B0\\u94B1\\u5305\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u76D1\\u63A7\\u8D26\\u6237\\u7684\\u672A\\u6388\\u6743\\u6D3B\\u52A8\"}),`\n`]}),`\n`,(0,i.jsx)(n.h2,{id:\"\\u4FDD\\u62A4\\u7B56\\u7565\",children:\"\\u4FDD\\u62A4\\u7B56\\u7565\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u8F6F\\u4EF6\\u4E0B\\u8F7D\\u5B89\\u5168\",children:\"\\u8F6F\\u4EF6\\u4E0B\\u8F7D\\u5B89\\u5168\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u6700\\u4F73\\u5B9E\\u8DF5\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u4EC5\\u4ECE Mac App Store \\u6216\\u7ECF\\u8FC7\\u9A8C\\u8BC1\\u7684\\u5F00\\u53D1\\u8005\\u7F51\\u7AD9\\u5B89\\u88C5\\u5E94\\u7528\\u7A0B\\u5E8F\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u907F\\u514D\\u4ECE\\u672A\\u77E5\\u6216\\u975E\\u5B98\\u65B9\\u6765\\u6E90\\u4E0B\\u8F7D\\u8F6F\\u4EF6\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u4E0B\\u8F7D\\u524D\\u4ED4\\u7EC6\\u68C0\\u67E5 URL\\uFF08\\u67E5\\u627E\\u62FC\\u5199\\u9519\\u8BEF\\u6216\\u53EF\\u7591\\u57DF\\u540D\\uFF09\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5BF9\\u8BBA\\u575B\\u4E0A\\u53D1\\u73B0\\u7684\\u201C\\u7834\\u89E3\\u201D\\u8F6F\\u4EF6\\u6216\\u5B89\\u88C5\\u7A0B\\u5E8F\\u8981\\u683C\\u5916\\u5C0F\\u5FC3\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5B89\\u88C5\\u524D\\u9A8C\\u8BC1\\u5E94\\u7528\\u7A0B\\u5E8F\\u7B7E\\u540D\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u5982\\u4F55\\u9A8C\\u8BC1\\u5E94\\u7528\\u7A0B\\u5E8F\\u7B7E\\u540D\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u53F3\\u952E\\u70B9\\u51FB\\u5E94\\u7528\\u7A0B\\u5E8F > \\u9009\\u62E9\\u201C\\u663E\\u793A\\u7B80\\u4ECB\\u201D\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5728\\u201C\\u901A\\u7528\\u201D\\u90E8\\u5206\\u4E0B\\u67E5\\u627E\\u5F00\\u53D1\\u8005 ID \\u4FE1\\u606F\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u8B66\\u60D5\\u7531\\u672A\\u77E5\\u5F00\\u53D1\\u8005\\u7B7E\\u540D\\u7684\\u5E94\\u7528\\u7A0B\\u5E8F\"}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u542F\\u7528-macos-\\u5B89\\u5168\\u529F\\u80FD\",children:\"\\u542F\\u7528 macOS \\u5B89\\u5168\\u529F\\u80FD\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"Gatekeeper \\u8BBE\\u7F6E\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u7CFB\\u7EDF\\u8BBE\\u7F6E > \\u9690\\u79C1\\u4E0E\\u5B89\\u5168\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5728\\u201C\\u5141\\u8BB8\\u4ECE\\u4EE5\\u4E0B\\u4F4D\\u7F6E\\u4E0B\\u8F7D\\u7684\\u5E94\\u7528\\u7A0B\\u5E8F\\u201D\\u4E0B\\uFF0C\\u9009\\u62E9\\u201CApp Store \\u548C\\u5DF2\\u8BC6\\u522B\\u7684\\u5F00\\u53D1\\u8005\\u201D\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u6C38\\u8FDC\\u4E0D\\u8981\\u6C38\\u4E45\\u7981\\u7528 Gatekeeper\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u4FDD\\u6301 XProtect \\u66F4\\u65B0\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"XProtect \\u5728\\u540E\\u53F0\\u81EA\\u52A8\\u66F4\\u65B0\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u786E\\u4FDD\\u7CFB\\u7EDF\\u8BBE\\u7F6E\\u4E2D\\u542F\\u7528\\u4E86\\u81EA\\u52A8\\u66F4\\u65B0\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u542F\\u7528 FileVault\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u7CFB\\u7EDF\\u8BBE\\u7F6E > \\u9690\\u79C1\\u4E0E\\u5B89\\u5168 > FileVault\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u6253\\u5F00 FileVault \\u8FDB\\u884C\\u5168\\u76D8\\u52A0\\u5BC6\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5B89\\u5168\\u5730\\u5B58\\u50A8\\u6062\\u590D\\u5BC6\\u94A5\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u4FDD\\u6301 SIP \\u542F\\u7528\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u7CFB\\u7EDF\\u5B8C\\u6574\\u6027\\u4FDD\\u62A4 (System Integrity Protection) \\u5E94\\u4FDD\\u6301\\u542F\\u7528\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u9664\\u975E\\u7279\\u5B9A\\u7684\\u5F00\\u53D1\\u4EFB\\u52A1\\u7EDD\\u5BF9\\u5FC5\\u8981\\uFF0C\\u5426\\u5219\\u5207\\u52FF\\u7981\\u7528 SIP\"}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u6D4F\\u89C8\\u5668\\u5B89\\u5168\\u6700\\u4F73\\u5B9E\\u8DF5\",children:\"\\u6D4F\\u89C8\\u5668\\u5B89\\u5168\\u6700\\u4F73\\u5B9E\\u8DF5\"}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u4F7F\\u7528\\u5BC6\\u7801\\u7BA1\\u7406\\u5668\"}),\"\\uFF1A\\u4E0D\\u8981\\u4F9D\\u8D56\\u6D4F\\u89C8\\u5668\\u5B58\\u50A8\\u7684\\u5BC6\\u7801\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u542F\\u7528 2FA\"}),\"\\uFF1A\\u4E3A\\u6240\\u6709\\u5173\\u952E\\u8D26\\u6237\\u6FC0\\u6D3B\\u53CC\\u91CD\\u8BA4\\u8BC1\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u5B9A\\u671F\\u6269\\u5C55\\u5BA1\\u8BA1\"}),\"\\uFF1A\\u5BA1\\u67E5\\u5E76\\u79FB\\u9664\\u4E0D\\u5FC5\\u8981\\u7684\\u6D4F\\u89C8\\u5668\\u6269\\u5C55\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u6E05\\u9664\\u4F1A\\u8BDD\\u6570\\u636E\"}),\"\\uFF1A\\u5B9A\\u671F\\u6E05\\u9664 Cookie \\u548C\\u4F1A\\u8BDD\\u6570\\u636E\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u4F7F\\u7528\\u5355\\u72EC\\u7684\\u914D\\u7F6E\\u6587\\u4EF6\"}),\"\\uFF1A\\u4E3A\\u654F\\u611F\\u6D3B\\u52A8\\u521B\\u5EFA\\u5355\\u72EC\\u7684\\u6D4F\\u89C8\\u5668\\u914D\\u7F6E\\u6587\\u4EF6\"]}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u52A0\\u5BC6\\u8D27\\u5E01\\u4FDD\\u62A4\",children:\"\\u52A0\\u5BC6\\u8D27\\u5E01\\u4FDD\\u62A4\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u786C\\u4EF6\\u94B1\\u5305\\u4F7F\\u7528\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u5BF9\\u5927\\u989D\\u6301\\u6709\\u4F7F\\u7528\\u786C\\u4EF6\\u94B1\\u5305 (Ledger, Trezor)\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5207\\u52FF\\u5728\\u4EFB\\u4F55\\u7F51\\u7AD9\\u6216\\u5E94\\u7528\\u7A0B\\u5E8F\\u4E0A\\u8F93\\u5165\\u52A9\\u8BB0\\u8BCD\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u4EA4\\u6613\\u524D\\u5728\\u786C\\u4EF6\\u8BBE\\u5907\\u5C4F\\u5E55\\u4E0A\\u9A8C\\u8BC1\\u94B1\\u5305\\u5730\\u5740\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u8F6F\\u4EF6\\u94B1\\u5305\\u5B89\\u5168\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u5728\\u4EA4\\u6613\\u6240\\u8D26\\u6237\\u4E0A\\u542F\\u7528\\u6240\\u6709\\u53EF\\u7528\\u7684 2FA \\u9009\\u9879\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5BF9\\u5927\\u989D\\u8D44\\u91D1\\u4F7F\\u7528\\u591A\\u91CD\\u7B7E\\u540D\\u94B1\\u5305\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5728\\u591A\\u4E2A\\u5B89\\u5168\\u4F4D\\u7F6E\\u79BB\\u7EBF\\u5B58\\u50A8\\u6062\\u590D\\u77ED\\u8BED\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u4EC5\\u4ECE\\u5B98\\u65B9\\u6765\\u6E90\\u9A8C\\u8BC1\\u94B1\\u5305\\u8F6F\\u4EF6\\u4E0B\\u8F7D\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u4EA4\\u6613\\u5B89\\u5168\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u53D1\\u9001\\u52A0\\u5BC6\\u8D27\\u5E01\\u524D\\u59CB\\u7EC8\\u9A8C\\u8BC1\\u5730\\u5740\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u4F7F\\u7528\\u5355\\u72EC\\u7684\\u8BBE\\u5907\\u786E\\u8BA4\\u5927\\u989D\\u4EA4\\u6613\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5BF9\\u4EFB\\u4F55\\u201C\\u9A8C\\u8BC1\\u201D\\u6216\\u201C\\u786E\\u8BA4\\u201D\\u94B1\\u5305\\u7684\\u8BF7\\u6C42\\u4FDD\\u6301\\u6000\\u7591\"}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u4F01\\u4E1A\\u5B89\\u5168\\u5EFA\\u8BAE\",children:\"\\u4F01\\u4E1A\\u5B89\\u5168\\u5EFA\\u8BAE\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7AEF\\u70B9\\u4FDD\\u62A4\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u90E8\\u7F72 EDR \\u89E3\\u51B3\\u65B9\\u6848\\uFF0C\\u5982 Jamf Protect\\u3001CrowdStrike \\u6216 SentinelOne\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5728\\u201C\\u963B\\u6B62\\u6A21\\u5F0F\\u201D\\u4E0B\\u542F\\u7528\\u9AD8\\u7EA7\\u5A01\\u80C1\\u63A7\\u5236\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5C3D\\u53EF\\u80FD\\u5B9E\\u65BD\\u5E94\\u7528\\u7A0B\\u5E8F\\u767D\\u540D\\u5355\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"MDM \\u914D\\u7F6E\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u4F7F\\u7528\\u79FB\\u52A8\\u8BBE\\u5907\\u7BA1\\u7406 (MDM) \\u8FDB\\u884C\\u96C6\\u4E2D\\u5B89\\u5168\\u7B56\\u7565\\u7BA1\\u7406\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u9650\\u5236\\u8F6F\\u4EF6\\u5B89\\u88C5\\u4E3A\\u7ECF\\u6279\\u51C6\\u7684\\u6765\\u6E90\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u542F\\u7528\\u81EA\\u52A8\\u5B89\\u5168\\u66F4\\u65B0\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7528\\u6237\\u57F9\\u8BAD\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u8FDB\\u884C\\u5B9A\\u671F\\u5B89\\u5168\\u610F\\u8BC6\\u57F9\\u8BAD\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5F3A\\u8C03\\u4ECE\\u975E\\u5B98\\u65B9\\u6765\\u6E90\\u4E0B\\u8F7D\\u8F6F\\u4EF6\\u7684\\u98CE\\u9669\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5EFA\\u7ACB\\u6E05\\u6670\\u7684\\u53EF\\u7591\\u6D3B\\u52A8\\u62A5\\u544A\\u7A0B\\u5E8F\"}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u7F51\\u7EDC\\u5B89\\u5168\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u5B9E\\u65BD DNS \\u8FC7\\u6EE4\\u4EE5\\u963B\\u6B62\\u5DF2\\u77E5\\u7684\\u6076\\u610F\\u57DF\\u540D\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u76D1\\u63A7\\u7F51\\u7EDC\\u6D41\\u91CF\\u4EE5\\u67E5\\u627E\\u53EF\\u7591\\u7684 C2 \\u901A\\u4FE1\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5206\\u6BB5\\u7F51\\u7EDC\\u4EE5\\u9650\\u5236\\u6A2A\\u5411\\u79FB\\u52A8\"}),`\n`]}),`\n`,(0,i.jsx)(n.h2,{id:\"apple-\\u7684\\u56DE\\u5E94\\u548C\\u5B89\\u5168\\u5F71\\u54CD\",children:\"Apple \\u7684\\u56DE\\u5E94\\u548C\\u5B89\\u5168\\u5F71\\u54CD\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u91C7\\u53D6\\u7684\\u884C\\u52A8\",children:\"\\u91C7\\u53D6\\u7684\\u884C\\u52A8\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u7EE7 Jamf Threat Labs \\u62AB\\u9732\\u540E\\uFF1A\"}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"Apple \\u64A4\\u9500\\u4E86\\u4E0E\\u5F00\\u53D1\\u8005 Team ID GNJLS3UYZ4 \\u5173\\u8054\\u7684\\u8BC1\\u4E66\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u7279\\u5B9A\\u7684\\u7B7E\\u540D\\u8BC1\\u4E66\\u4E0D\\u518D\\u5BF9\\u65B0\\u5B89\\u88C5\\u6709\\u6548\"}),`\n`]}),`\n`,(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:\"\\u91CD\\u8981\\u9650\\u5236\\uFF1A\"}),`\nJamf \\u7684\\u62A5\\u544A\\u53D1\\u5E03\\u65F6\\uFF0C\\u4EE3\\u7801\\u76EE\\u5F55\\u54C8\\u5E0C\\u672A\\u5305\\u542B\\u5728 Apple \\u7684\\u64A4\\u9500\\u5217\\u8868\\u4E2D\\uFF0C\\u8FD9\\u610F\\u5473\\u7740\\u67D0\\u4E9B\\u53D8\\u4F53\\u53EF\\u80FD\\u4ECD\\u4F1A\\u5728\\u5148\\u524D\\u5141\\u8BB8\\u5B83\\u4EEC\\u7684\\u7CFB\\u7EDF\\u4E0A\\u6267\\u884C\\u3002`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u57FA\\u672C\\u5B89\\u5168\\u6311\\u6218\",children:\"\\u57FA\\u672C\\u5B89\\u5168\\u6311\\u6218\"}),`\n`,(0,i.jsx)(n.p,{children:\"MacSync \\u6848\\u4F8B\\u66B4\\u9732\\u4E86 Apple \\u5B89\\u5168\\u67B6\\u6784\\u4E2D\\u7684\\u4E00\\u4E2A\\u57FA\\u672C\\u5F31\\u70B9\\uFF1A\"}),`\n`,(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:\"\\u8BBE\\u8BA1\\u9650\\u5236\\uFF1A\"}),`\n\\u516C\\u8BC1\\u8BC4\\u4F30\\u7684\\u662F\\u63D0\\u4EA4\\u65F6\\u7684\\u60C5\\u51B5\\uFF0C\\u800C\\u4E0D\\u662F\\u8FD0\\u884C\\u65F6\\u884C\\u4E3A\\u3002\\u8FD9\\u4EA7\\u751F\\u4E86\\u4E00\\u4E2A\\u56FA\\u6709\\u7684\\u6F0F\\u6D1E\\u7A97\\u53E3\\u3002`]}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u4E13\\u5BB6\\u5206\\u6790\\uFF1A\"})}),`\n`,(0,i.jsx)(n.p,{children:\"\\u5B89\\u5168\\u7814\\u7A76\\u5458 Chris Miller \\u6307\\u51FA\\uFF0CGatekeeper \\u4EC5\\u5728\\u5E94\\u7528\\u7A0B\\u5E8F\\u9996\\u6B21\\u6253\\u5F00\\u65F6\\u9A8C\\u8BC1\\u5F00\\u53D1\\u8005\\u8BC1\\u4E66\\u5E76\\u68C0\\u67E5\\u5DF2\\u77E5\\u6076\\u610F\\u8F6F\\u4EF6\\u5217\\u8868\\u3002\\u901A\\u8FC7\\u521D\\u59CB\\u68C0\\u67E5\\u7684\\u6076\\u610F\\u8F6F\\u4EF6\\u7A0D\\u540E\\u5C06\\u4E0D\\u4F1A\\u88AB\\u963B\\u6B62\\u3002\"}),`\n`,(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:\"\\u73B0\\u5B9E\\uFF1A\"}),`\n\\u8BE5\\u7CFB\\u7EDF\\u4E3B\\u8981\\u6309\\u8BBE\\u8BA1\\u5DE5\\u4F5C\\u3002\\u4EE3\\u7801\\u7B7E\\u540D\\u548C\\u516C\\u8BC1\\u4ECE\\u672A\\u6253\\u7B97\\u4FDD\\u8BC1\\u8F6F\\u4EF6\\u6C38\\u8FDC\\u826F\\u6027\\u2014\\u2014\\u53EA\\u662F\\u4E3A\\u4E86\\u5728\\u53D1\\u73B0\\u6EE5\\u7528\\u65F6\\u53EF\\u4EE5\\u8FFD\\u8E2A\\u548C\\u64A4\\u9500\\u3002\\u7136\\u800C\\uFF0C\\u8FD9\\u79CD\\u53CD\\u5E94\\u6027\\u65B9\\u6CD5\\u4F7F\\u68C0\\u6D4B\\u95F4\\u9699\\u671F\\u95F4\\u7684\\u7528\\u6237\\u5904\\u4E8E\\u5F31\\u52BF\\u3002`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u8FD9\\u5BF9\\u7528\\u6237\\u610F\\u5473\\u7740\\u4EC0\\u4E48\",children:\"\\u8FD9\\u5BF9\\u7528\\u6237\\u610F\\u5473\\u7740\\u4EC0\\u4E48\"}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u516C\\u8BC1\\u4E0D\\u662F\\u4FDD\\u8BC1\"}),\"\\uFF1A\\u516C\\u8BC1\\u7684\\u5E94\\u7528\\u7A0B\\u5E8F\\u4ECD\\u53EF\\u80FD\\u662F\\u6076\\u610F\\u7684\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u9996\\u6B21\\u8FD0\\u884C\\u68C0\\u67E5\\u662F\\u4E0D\\u591F\\u7684\"}),\"\\uFF1A\\u6076\\u610F\\u8F6F\\u4EF6\\u53EF\\u4EE5\\u5728\\u521D\\u59CB\\u6279\\u51C6\\u540E\\u6FC0\\u6D3B\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u8B66\\u60D5\\u4ECD\\u7136\\u81F3\\u5173\\u91CD\\u8981\"}),\"\\uFF1A\\u65E0\\u8BBA Gatekeeper \\u662F\\u5426\\u6279\\u51C6\\uFF0C\\u7528\\u6237\\u90FD\\u5FC5\\u987B\\u4FDD\\u6301\\u5B89\\u5168\\u610F\\u8BC6\"]}),`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.strong,{children:\"\\u7EB5\\u6DF1\\u9632\\u5FA1\"}),\"\\uFF1A\\u5168\\u9762\\u4FDD\\u62A4\\u9700\\u8981\\u591A\\u5C42\\u5B89\\u5168\\u63AA\\u65BD\"]}),`\n`]}),`\n`,(0,i.jsx)(n.h2,{id:\"\\u76F8\\u5173\\u7684-macos-\\u5A01\\u80C1\",children:\"\\u76F8\\u5173\\u7684 macOS \\u5A01\\u80C1\"}),`\n`,(0,i.jsx)(n.h3,{id:\"amos-atomic-macos-stealer\",children:\"AMOS (Atomic macOS Stealer)\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u7F51\\u7EDC\\u72AF\\u7F6A\\u5730\\u4E0B\\u7EC4\\u7EC7\\u4E2D\\u4E09\\u5E74\\u4EE5\\u6765\\u6700\\u6D41\\u884C\\u7684 Mac \\u6076\\u610F\\u8F6F\\u4EF6\\uFF1A\"}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u81EA 2023 \\u5E74 4 \\u6708\\u4EE5\\u6765\\u4E00\\u76F4\\u6D3B\\u8DC3\"}),`\n`,(0,i.jsx)(n.li,{children:\"2025 \\u5E74\\u66F4\\u65B0\\u6DFB\\u52A0\\u4E86\\u5D4C\\u5165\\u5F0F\\u540E\\u95E8\\u4EE5\\u8FDB\\u884C\\u6301\\u4E45\\u8BBF\\u95EE\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5168\\u7403\\u8303\\u56F4\\u5185\\u5DF2\\u77E5\\u90E8\\u7F72\\u540E\\u95E8\\u7684\\u7B2C\\u4E8C\\u4E2A\\u6848\\u4F8B\\uFF08\\u7EE7\\u671D\\u9C9C\\u9ED1\\u5BA2\\u4E4B\\u540E\\uFF09\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u9488\\u5BF9\\u4E0E MacSync \\u76F8\\u4F3C\\u7684\\u6570\\u636E\\u7C7B\\u522B\"}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"nova-stealer\",children:\"Nova Stealer\"}),`\n`,(0,i.jsx)(n.p,{children:\"2025 \\u5E74 11 \\u6708\\u51FA\\u73B0\\uFF1A\"}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u4E3B\\u8981\\u96C6\\u4E2D\\u5728\\u52A0\\u5BC6\\u8D27\\u5E01\\u76D7\\u7A83\\u4E0A\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u4F2A\\u88C5\\u6210\\u5408\\u6CD5\\u7684\\u94B1\\u5305\\u8F6F\\u4EF6 (Ledger Live, Trezor Suite)\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u4F7F\\u7528\\u793E\\u4F1A\\u5DE5\\u7A0B\\u5B66\\u83B7\\u5F97\\u521D\\u59CB\\u8BBF\\u95EE\\u6743\\u9650\"}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"cthulhu-stealer\",children:\"Cthulhu Stealer\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u53E6\\u4E00\\u4E2A\\u6D3B\\u8DC3\\u7684\\u4FE1\\u606F\\u7A83\\u53D6\\u7A0B\\u5E8F\\uFF0C\\u5177\\u6709\\uFF1A\"}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u76F8\\u4F3C\\u7684\\u6570\\u636E\\u7A83\\u53D6\\u80FD\\u529B\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u4E3B\\u8981\\u5173\\u6CE8\\u6D4F\\u89C8\\u5668\\u51ED\\u636E\\u548C\\u52A0\\u5BC6\\u8D27\\u5E01\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u4E0D\\u540C\\u7684\\u5206\\u53D1\\u65B9\\u6CD5\\u4F46\\u5F71\\u54CD\\u76F8\\u5F53\"}),`\n`]}),`\n`,(0,i.jsx)(n.h2,{id:\"\\u63A8\\u8350\\u7684\\u5B89\\u5168\\u89E3\\u51B3\\u65B9\\u6848\",children:\"\\u63A8\\u8350\\u7684\\u5B89\\u5168\\u89E3\\u51B3\\u65B9\\u6848\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u9488\\u5BF9\\u4E2A\\u4EBA\\u7528\\u6237\",children:\"\\u9488\\u5BF9\\u4E2A\\u4EBA\\u7528\\u6237\"}),`\n`,(0,i.jsxs)(n.table,{children:[(0,i.jsx)(n.thead,{children:(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.th,{children:\"\\u89E3\\u51B3\\u65B9\\u6848\"}),(0,i.jsx)(n.th,{children:\"\\u4EF7\\u683C\"}),(0,i.jsx)(n.th,{children:\"\\u4E3B\\u8981\\u529F\\u80FD\"})]})}),(0,i.jsxs)(n.tbody,{children:[(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Moonlock\"}),(0,i.jsx)(n.td,{children:\"$37.80/\\u5E74\"}),(0,i.jsx)(n.td,{children:\"\\u8F7B\\u91CF\\u7EA7\\uFF0CMac \\u539F\\u751F\\uFF0C\\u5B9E\\u65F6\\u4FDD\\u62A4\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Malwarebytes\"}),(0,i.jsx)(n.td,{children:\"\\u514D\\u8D39\\uFF08\\u57FA\\u7840\\uFF09/ $44.99/\\u5E74\"}),(0,i.jsx)(n.td,{children:\"\\u6309\\u9700\\u626B\\u63CF\\uFF0C\\u5B9E\\u65F6\\uFF08\\u4ED8\\u8D39\\uFF09\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Intego VirusBarrier\"}),(0,i.jsx)(n.td,{children:\"$49.99/\\u5E74\"}),(0,i.jsx)(n.td,{children:\"\\u5168\\u9762\\u7684 Mac \\u5B89\\u5168\\u5957\\u4EF6\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Combo Cleaner\"}),(0,i.jsx)(n.td,{children:\"$59.95/\\u5E74\"}),(0,i.jsx)(n.td,{children:\"\\u6076\\u610F\\u8F6F\\u4EF6\\u79FB\\u9664\\uFF0C\\u7CFB\\u7EDF\\u4F18\\u5316\"})]})]})]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u9488\\u5BF9\\u4F01\\u4E1A\",children:\"\\u9488\\u5BF9\\u4F01\\u4E1A\"}),`\n`,(0,i.jsxs)(n.table,{children:[(0,i.jsx)(n.thead,{children:(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.th,{children:\"\\u89E3\\u51B3\\u65B9\\u6848\"}),(0,i.jsx)(n.th,{children:\"\\u4E3B\\u8981\\u529F\\u80FD\"})]})}),(0,i.jsxs)(n.tbody,{children:[(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Jamf Protect\"}),(0,i.jsx)(n.td,{children:\"\\u539F\\u751F macOS EDR\\uFF0CMDM \\u96C6\\u6210\\uFF0C\\u5A01\\u80C1\\u9884\\u9632\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"CrowdStrike Falcon\"}),(0,i.jsx)(n.td,{children:\"\\u8DE8\\u5E73\\u53F0 EDR\\uFF0C\\u5A01\\u80C1\\u60C5\\u62A5\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Microsoft Defender for Endpoint\"}),(0,i.jsx)(n.td,{children:\"\\u7EDF\\u4E00\\u5B89\\u5168\\uFF0CAzure \\u96C6\\u6210\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"SentinelOne\"}),(0,i.jsx)(n.td,{children:\"AI \\u9A71\\u52A8\\u7684\\u68C0\\u6D4B\\uFF0C\\u81EA\\u52A8\\u54CD\\u5E94\"})]}),(0,i.jsxs)(n.tr,{children:[(0,i.jsx)(n.td,{children:\"Trellix Endpoint Security\"}),(0,i.jsx)(n.td,{children:\"\\u4F01\\u4E1A\\u7EA7\\u4FDD\\u62A4\\uFF0C\\u7B56\\u7565\\u7BA1\\u7406\"})]})]})]}),`\n`,(0,i.jsx)(n.h2,{id:\"\\u7ED3\\u8BBA\\u5728\\u4E0D\\u65AD\\u6F14\\u53D8\\u7684\\u5A01\\u80C1\\u73AF\\u5883\\u4E2D\\u4FDD\\u6301\\u5B89\\u5168\",children:\"\\u7ED3\\u8BBA\\uFF1A\\u5728\\u4E0D\\u65AD\\u6F14\\u53D8\\u7684\\u5A01\\u80C1\\u73AF\\u5883\\u4E2D\\u4FDD\\u6301\\u5B89\\u5168\"}),`\n`,(0,i.jsx)(n.p,{children:\"2025 \\u5E74 12 \\u6708\\u53D1\\u73B0\\u7684 MacSync Stealer \\u53D8\\u4F53\\u4EE3\\u8868\\u4E86 macOS \\u6076\\u610F\\u8F6F\\u4EF6\\u590D\\u6742\\u6027\\u7684\\u91CD\\u5927\\u6F14\\u53D8\\u3002\\u901A\\u8FC7\\u5229\\u7528 Apple \\u7684\\u516C\\u8BC1\\u6D41\\u7A0B\\uFF0C\\u653B\\u51FB\\u8005\\u627E\\u5230\\u4E86\\u4E00\\u79CD\\u5206\\u53D1\\u6076\\u610F\\u8F6F\\u4EF6\\u7684\\u65B9\\u6CD5\\uFF0C\\u8BE5\\u65B9\\u6CD5\\u7ED5\\u8FC7\\u4E86\\u5927\\u591A\\u6570\\u7528\\u6237\\u4F9D\\u8D56\\u7684\\u5B89\\u5168\\u63AA\\u65BD\\u3002\"}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.strong,{children:\"\\u5173\\u952E\\u8981\\u70B9\\uFF1A\"})}),`\n`,(0,i.jsxs)(n.ol,{children:[`\n`,(0,i.jsxs)(n.li,{children:[`\n`,(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:\"\\u4FE1\\u4EFB\\u4F46\\u8981\\u9A8C\\u8BC1\"}),\"\\uFF1AApple \\u516C\\u8BC1\\u4E0D\\u662F\\u5B89\\u5168\\u7684\\u4FDD\\u8BC1\\u3002\\u5B89\\u88C5\\u524D\\u59CB\\u7EC8\\u9A8C\\u8BC1\\u8F6F\\u4EF6\\u7684\\u6765\\u6E90\\u548C\\u5408\\u6CD5\\u6027\\u3002\"]}),`\n`]}),`\n`,(0,i.jsxs)(n.li,{children:[`\n`,(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:\"\\u7EB5\\u6DF1\\u9632\\u5FA1\"}),\"\\uFF1A\\u4F9D\\u9760\\u591A\\u5C42\\u5B89\\u5168\\u5C42\\u2014\\u2014Gatekeeper\\u3001XProtect\\u3001\\u7B2C\\u4E09\\u65B9\\u53CD\\u6076\\u610F\\u8F6F\\u4EF6\\u548C\\u5B89\\u5168\\u6700\\u4F73\\u5B9E\\u8DF5\\u3002\"]}),`\n`]}),`\n`,(0,i.jsxs)(n.li,{children:[`\n`,(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:\"\\u52A0\\u5BC6\\u8D27\\u5E01\\u8B66\\u60D5\"}),\"\\uFF1A\\u5982\\u679C\\u60A8\\u6301\\u6709\\u52A0\\u5BC6\\u8D27\\u5E01\\uFF0C\\u8BF7\\u4F7F\\u7528\\u786C\\u4EF6\\u94B1\\u5305\\uFF0C\\u5207\\u52FF\\u5C06\\u52A9\\u8BB0\\u8BCD\\u66B4\\u9732\\u7ED9\\u4EFB\\u4F55\\u8F6F\\u4EF6\\u3002\"]}),`\n`]}),`\n`,(0,i.jsxs)(n.li,{children:[`\n`,(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:\"\\u4FDD\\u6301\\u66F4\\u65B0\"}),\"\\uFF1A\\u4FDD\\u6301 macOS\\u3001\\u5B89\\u5168\\u5B9A\\u4E49\\u548C\\u6240\\u6709\\u5E94\\u7528\\u7A0B\\u5E8F\\u66F4\\u65B0\\uFF0C\\u4EE5\\u53D7\\u76CA\\u4E8E\\u6700\\u65B0\\u7684\\u4FDD\\u62A4\\u3002\"]}),`\n`]}),`\n`,(0,i.jsxs)(n.li,{children:[`\n`,(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.strong,{children:\"\\u62A5\\u544A\\u53EF\\u7591\\u6D3B\\u52A8\"}),\"\\uFF1A\\u5982\\u679C\\u60A8\\u9047\\u5230\\u7591\\u4F3C\\u6076\\u610F\\u8F6F\\u4EF6\\uFF0C\\u8BF7\\u5411 Apple \\u548C\\u5B89\\u5168\\u7814\\u7A76\\u4EBA\\u5458\\u62A5\\u544A\\uFF0C\\u4EE5\\u5E2E\\u52A9\\u4FDD\\u62A4\\u793E\\u533A\\u3002\"]}),`\n`]}),`\n`]}),`\n`,(0,i.jsx)(n.p,{children:\"macOS \\u5A01\\u80C1\\u5F62\\u52BF\\u7EE7\\u7EED\\u8FC5\\u901F\\u6F14\\u53D8\\u3002\\u867D\\u7136\\u4E0E\\u5176\\u4ED6\\u5E73\\u53F0\\u76F8\\u6BD4\\uFF0CMac \\u4ECD\\u7136\\u901A\\u5E38\\u662F\\u5B89\\u5168\\u7684\\uFF0C\\u4F46\\u50CF MacSync Stealer \\u8FD9\\u6837\\u65E5\\u76CA\\u590D\\u6742\\u7684\\u5A01\\u80C1\\u8868\\u660E\\u6CA1\\u6709\\u7CFB\\u7EDF\\u662F\\u514D\\u75AB\\u7684\\u3002\\u4FDD\\u6301\\u610F\\u8BC6\\uFF0C\\u9075\\u5FAA\\u5B89\\u5168\\u6700\\u4F73\\u5B9E\\u8DF5\\uFF0C\\u5E76\\u4F7F\\u7528\\u9002\\u5F53\\u7684\\u5B89\\u5168\\u5DE5\\u5177\\u5BF9\\u4E8E\\u4FDD\\u62A4\\u60A8\\u7684\\u6570\\u636E\\u548C\\u6570\\u5B57\\u8D44\\u4EA7\\u81F3\\u5173\\u91CD\\u8981\\u3002\"}),`\n`,(0,i.jsx)(n.hr,{}),`\n`,(0,i.jsx)(n.h2,{id:\"\\u5E38\\u89C1\\u95EE\\u9898-faq\",children:\"\\u5E38\\u89C1\\u95EE\\u9898 (FAQ)\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u6211\\u5982\\u4F55\\u77E5\\u9053\\u6211\\u7684-mac-\\u662F\\u5426\\u611F\\u67D3\\u4E86-macsync-stealer\",children:\"\\u6211\\u5982\\u4F55\\u77E5\\u9053\\u6211\\u7684 Mac \\u662F\\u5426\\u611F\\u67D3\\u4E86 MacSync Stealer\\uFF1F\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u68C0\\u67E5\\u4EE5\\u4E0B\\u6307\\u6807\\uFF1A\"}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsxs)(n.li,{children:[(0,i.jsx)(n.code,{children:\"/tmp/runner\"}),\" \\u6216 \",(0,i.jsx)(n.code,{children:\"~/Library/Application Support/UserSyncWorker/\"}),\" \\u4E2D\\u7684\\u6587\\u4EF6\"]}),`\n`,(0,i.jsx)(n.li,{children:'Activity Monitor \\u4E2D\\u540D\\u4E3A \"UserSyncWorker\" \\u7684\\u5F02\\u5E38\\u8FDB\\u7A0B'}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5BF9\\u964C\\u751F\\u57DF\\u540D\\u7684\\u610F\\u5916\\u7F51\\u7EDC\\u8FDE\\u63A5\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u4E22\\u5931\\u52A0\\u5BC6\\u8D27\\u5E01\\u6216\\u672A\\u6388\\u6743\\u7684\\u8D26\\u6237\\u8BBF\\u95EE\"}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"macsync-stealer-\\u80FD\\u7A83\\u53D6\\u6211\\u7684-icloud-keychain-\\u5BC6\\u7801\\u5417\",children:\"MacSync Stealer \\u80FD\\u7A83\\u53D6\\u6211\\u7684 iCloud Keychain \\u5BC6\\u7801\\u5417\\uFF1F\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u662F\\u7684\\uFF0C\\u5982\\u679C MacSync Stealer \\u901A\\u8FC7\\u5176\\u865A\\u5047\\u5BC6\\u7801\\u63D0\\u793A\\u83B7\\u5F97\\u4E86\\u60A8\\u7684\\u7CFB\\u7EDF\\u5BC6\\u7801\\uFF0C\\u5B83\\u53EF\\u4EE5\\u8BBF\\u95EE Keychain \\u6570\\u636E\\u3002\\u8FD9\\u5C31\\u662F\\u4E3A\\u4EC0\\u4E48\\u60A8\\u6C38\\u8FDC\\u4E0D\\u5E94\\u8BE5\\u5728\\u610F\\u5916\\u7684\\u5BF9\\u8BDD\\u6846\\u4E2D\\u8F93\\u5165\\u5BC6\\u7801\\u7684\\u539F\\u56E0\\u3002\"}),`\n`,(0,i.jsx)(n.h3,{id:\"apple-\\u7684-xprotect-\\u80FD\\u9632\\u6B62-macsync-stealer-\\u5417\",children:\"Apple \\u7684 XProtect \\u80FD\\u9632\\u6B62 MacSync Stealer \\u5417\\uFF1F\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u5728 Apple \\u66F4\\u65B0\\u5176\\u5B9A\\u4E49\\u540E\\uFF0CXProtect \\u53EF\\u80FD\\u4F1A\\u68C0\\u6D4B\\u5230\\u5DF2\\u77E5\\u7684\\u53D8\\u4F53\\u3002\\u4F46\\u662F\\uFF0C\\u65B0\\u53D8\\u4F53\\u53EF\\u4EE5\\u5728\\u7B7E\\u540D\\u66F4\\u65B0\\u4E4B\\u524D\\u9003\\u907F\\u68C0\\u6D4B\\u3002\\u8FD9\\u5C31\\u662F\\u5EFA\\u8BAE\\u91C7\\u53D6\\u989D\\u5916\\u5B89\\u5168\\u63AA\\u65BD\\u7684\\u539F\\u56E0\\u3002\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u6211\\u5E94\\u8BE5\\u56E0\\u4E3A\\u8FD9\\u4E2A\\u6076\\u610F\\u8F6F\\u4EF6\\u800C\\u505C\\u6B62\\u4F7F\\u7528-mac-\\u5417\",children:\"\\u6211\\u5E94\\u8BE5\\u56E0\\u4E3A\\u8FD9\\u4E2A\\u6076\\u610F\\u8F6F\\u4EF6\\u800C\\u505C\\u6B62\\u4F7F\\u7528 Mac \\u5417\\uFF1F\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u4E0D\\u3002\\u867D\\u7136 MacSync Stealer \\u5F88\\u590D\\u6742\\uFF0C\\u4F46\\u5F53\\u7528\\u6237\\u9075\\u5FAA\\u6700\\u4F73\\u5B9E\\u8DF5\\u65F6\\uFF0CMac \\u4ECD\\u7136\\u662F\\u5B89\\u5168\\u7684\\u3002\\u5173\\u952E\\u662F\\u610F\\u8BC6\\u548C\\u9002\\u5F53\\u7684\\u5B89\\u5168\\u536B\\u751F\\u2014\\u2014\\u4EC5\\u4ECE\\u53D7\\u4FE1\\u4EFB\\u7684\\u6765\\u6E90\\u4E0B\\u8F7D\\u8F6F\\u4EF6\\uFF0C\\u4F7F\\u7528\\u5F3A\\u5BC6\\u7801\\uFF0C\\u5E76\\u7EF4\\u62A4\\u66F4\\u65B0\\u7684\\u5B89\\u5168\\u8F6F\\u4EF6\\u3002\"}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u6211\\u5982\\u4F55\\u4FDD\\u62A4\\u6211\\u7684\\u52A0\\u5BC6\\u8D27\\u5E01\\u514D\\u53D7-mac-\\u6076\\u610F\\u8F6F\\u4EF6\\u4FB5\\u5BB3\",children:\"\\u6211\\u5982\\u4F55\\u4FDD\\u62A4\\u6211\\u7684\\u52A0\\u5BC6\\u8D27\\u5E01\\u514D\\u53D7 Mac \\u6076\\u610F\\u8F6F\\u4EF6\\u4FB5\\u5BB3\\uFF1F\"}),`\n`,(0,i.jsxs)(n.ul,{children:[`\n`,(0,i.jsx)(n.li,{children:\"\\u5BF9\\u5927\\u989D\\u6301\\u6709\\u4F7F\\u7528\\u786C\\u4EF6\\u94B1\\u5305\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5207\\u52FF\\u5728\\u4EFB\\u4F55\\u5E94\\u7528\\u7A0B\\u5E8F\\u6216\\u7F51\\u7AD9\\u4E2D\\u8F93\\u5165\\u52A9\\u8BB0\\u8BCD\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5728\\u6240\\u6709\\u4EA4\\u6613\\u6240\\u8D26\\u6237\\u4E0A\\u542F\\u7528 2FA\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u5728\\u5355\\u72EC\\u7684\\u8BBE\\u5907\\u4E0A\\u9A8C\\u8BC1\\u6240\\u6709\\u4EA4\\u6613\"}),`\n`,(0,i.jsx)(n.li,{children:\"\\u8003\\u8651\\u4F7F\\u7528\\u4E13\\u7528\\u8BBE\\u5907\\u8FDB\\u884C\\u52A0\\u5BC6\\u8D27\\u5E01\\u6D3B\\u52A8\"}),`\n`]}),`\n`,(0,i.jsx)(n.h3,{id:\"\\u6211\\u7684\\u4F01\\u4E1A\\u662F\\u5426\\u9762\\u4E34-macsync-stealer-\\u7684\\u98CE\\u9669\",children:\"\\u6211\\u7684\\u4F01\\u4E1A\\u662F\\u5426\\u9762\\u4E34 MacSync Stealer \\u7684\\u98CE\\u9669\\uFF1F\"}),`\n`,(0,i.jsx)(n.p,{children:\"\\u662F\\u7684\\uFF0C\\u7279\\u522B\\u662F\\u5982\\u679C\\u5458\\u5DE5\\u4ECE\\u975E\\u5B98\\u65B9\\u6765\\u6E90\\u4E0B\\u8F7D\\u8F6F\\u4EF6\\u3002\\u5B9E\\u65BD MDM \\u89E3\\u51B3\\u65B9\\u6848\\uFF0C\\u90E8\\u7F72\\u7AEF\\u70B9\\u4FDD\\u62A4\\uFF0C\\u8FDB\\u884C\\u5B89\\u5168\\u610F\\u8BC6\\u57F9\\u8BAD\\uFF0C\\u5E76\\u5EFA\\u7ACB\\u6E05\\u6670\\u7684\\u8F6F\\u4EF6\\u5B89\\u88C5\\u7B56\\u7565\\u3002\"}),`\n`,(0,i.jsx)(n.hr,{}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsx)(n.em,{children:\"\\u6700\\u540E\\u66F4\\u65B0\\uFF1A2025 \\u5E74 12 \\u6708 30 \\u65E5\"})}),`\n`,(0,i.jsx)(n.p,{children:(0,i.jsxs)(n.em,{children:[\"\\u6B32\\u4E86\\u89E3\\u66F4\\u591A\\u5B89\\u5168\\u8D44\\u6E90\\u548C macOS \\u4FDD\\u62A4\\u6307\\u5357\\uFF0C\\u8BF7\\u6D4F\\u89C8\\u6211\\u4EEC\\u7684 \",(0,i.jsx)(n.a,{href:\"/blog/category/security\",children:\"\\u5B89\\u5168\\u7C7B\\u522B\"}),\" \\u6216\\u67E5\\u770B\\u6211\\u4EEC\\u5168\\u9762\\u7684 \",(0,i.jsx)(n.a,{href:\"/blog/macos-tahoe-security-privacy-complete-guide-2025\",children:\"macOS Tahoe \\u5B89\\u5168\\u4E0E\\u9690\\u79C1\\u6307\\u5357\"}),\"\\u3002\"]})})]})}function k(e={}){let{wrapper:n}=e.components||{};return n?(0,i.jsx)(n,{...e,children:(0,i.jsx)(t,{...e})}):t(e)}return b(A);})();\n;return Component;","toc":[{"title":"执行摘要：MacSync Stealer 威胁","url":"#执行摘要macsync-stealer-威胁","depth":2},{"title":"关键安全警报","url":"#关键安全警报","depth":3},{"title":"日益增长的 macOS 恶意软件形势","url":"#日益增长的-macos-恶意软件形势","depth":3},{"title":"技术分析：MacSync Stealer 如何工作","url":"#技术分析macsync-stealer-如何工作","depth":2},{"title":"起源与演变","url":"#起源与演变","depth":3},{"title":"公证绕过技术","url":"#公证绕过技术","depth":3},{"title":"详细感染链","url":"#详细感染链","depth":3},{"title":"逃避技术","url":"#逃避技术","depth":3},{"title":"MacSync Stealer 针对哪些数据","url":"#macsync-stealer-针对哪些数据","depth":2},{"title":"浏览器凭据和数据","url":"#浏览器凭据和数据","depth":3},{"title":"加密货币钱包","url":"#加密货币钱包","depth":3},{"title":"系统和应用程序数据","url":"#系统和应用程序数据","depth":3},{"title":"入侵指标 (IOCs)","url":"#入侵指标-iocs","depth":2},{"title":"文件哈希 (SHA256)","url":"#文件哈希-sha256","depth":3},{"title":"网络指标","url":"#网络指标","depth":3},{"title":"文件系统指标","url":"#文件系统指标","depth":3},{"title":"日志模式","url":"#日志模式","depth":3},{"title":"检测方法","url":"#检测方法","depth":2},{"title":"使用 Activity Monitor（活动监视器）","url":"#使用-activity-monitor活动监视器","depth":3},{"title":"用于检测的终端命令","url":"#用于检测的终端命令","depth":3},{"title":"杀毒软件检测名称","url":"#杀毒软件检测名称","depth":3},{"title":"移除指南","url":"#移除指南","depth":2},{"title":"立即响应步骤","url":"#立即响应步骤","depth":3},{"title":"保护策略","url":"#保护策略","depth":2},{"title":"软件下载安全","url":"#软件下载安全","depth":3},{"title":"启用 macOS 安全功能","url":"#启用-macos-安全功能","depth":3},{"title":"浏览器安全最佳实践","url":"#浏览器安全最佳实践","depth":3},{"title":"加密货币保护","url":"#加密货币保护","depth":3},{"title":"企业安全建议","url":"#企业安全建议","depth":3},{"title":"Apple 的回应和安全影响","url":"#apple-的回应和安全影响","depth":2},{"title":"采取的行动","url":"#采取的行动","depth":3},{"title":"基本安全挑战","url":"#基本安全挑战","depth":3},{"title":"这对用户意味着什么","url":"#这对用户意味着什么","depth":3},{"title":"相关的 macOS 威胁","url":"#相关的-macos-威胁","depth":2},{"title":"AMOS (Atomic macOS Stealer)","url":"#amos-atomic-macos-stealer","depth":3},{"title":"Nova Stealer","url":"#nova-stealer","depth":3},{"title":"Cthulhu Stealer","url":"#cthulhu-stealer","depth":3},{"title":"推荐的安全解决方案","url":"#推荐的安全解决方案","depth":2},{"title":"针对个人用户","url":"#针对个人用户","depth":3},{"title":"针对企业","url":"#针对企业","depth":3},{"title":"结论：在不断演变的威胁环境中保持安全","url":"#结论在不断演变的威胁环境中保持安全","depth":2},{"title":"常见问题 (FAQ)","url":"#常见问题-faq","depth":2},{"title":"我如何知道我的 Mac 是否感染了 MacSync Stealer？","url":"#我如何知道我的-mac-是否感染了-macsync-stealer","depth":3},{"title":"MacSync Stealer 能窃取我的 iCloud Keychain 密码吗？","url":"#macsync-stealer-能窃取我的-icloud-keychain-密码吗","depth":3},{"title":"Apple 的 XProtect 能防止 MacSync Stealer 吗？","url":"#apple-的-xprotect-能防止-macsync-stealer-吗","depth":3},{"title":"我应该因为这个恶意软件而停止使用 Mac 吗？","url":"#我应该因为这个恶意软件而停止使用-mac-吗","depth":3},{"title":"我如何保护我的加密货币免受 Mac 恶意软件侵害？","url":"#我如何保护我的加密货币免受-mac-恶意软件侵害","depth":3},{"title":"我的企业是否面临 MacSync Stealer 的风险？","url":"#我的企业是否面临-macsync-stealer-的风险","depth":3}],"estimatedTime":8}