Odaily News SlowMist CISO 23pds posted on the X platform: "The attacker took away the safe owner privilege with a single forged signature attack. It is speculated that more than one macOS or Windows computer must have been controlled, and the attacker may have stayed in the intranet for some time and was able to monitor internal chats, transfer times, and other information."