Remote Mac Exploitation Via Custom URL Schemes
https://objective-see.com/blog/blog_0x38.html [objective-see.com]
2018-09-03 17:23
Which also means custom URL scheme handlers:
■ are registered automatically by macOS as soon as application (that “advertises” support for such handlers) hits the file-system
■ will trigger the execution of the (automatically registered) handler application, when the custom url scheme is invoked
Kind of obvious in hindsight, making things too easy leads to runaway.
source: L