Ran a quick check, realizing there was remote access to the machine with a script copying files. Disconnected the internet instantly and did a thorough inspection. Found an osascript from the terminal moving files to Library/Caches, possibly for uploading.
You are viewing a single comment's thread from: