PRC State Actors Maintain Persistent Access to U.S. Critical Infrastructure (cisa.gov)

> In macOS environments, LOTL is also referred to as “living off the orchard.”

Good to know.