Fascinating article. Short version: there was a bug in the part of Apple’s Gatekeeper code that checked whether a file was an application bundle. Bundles that only contained a script, and not a plist file, were considered “not a bundle,” and this bypasses the Gatekeeper checks.
The issue is fixed in the latest version of Big Sur. Be sure to upgrade. It’s being exploited in the wild.
The issue is fixed in the latest version of Big Sur. Be sure to upgrade. It’s being exploited in the wild.