About
BlockBlock is a macOS app that monitors common persistence locations and alerts you whenever a new persistent component is added to the system. Because malware often installs itself to run automatically on restart or login, BlockBlock helps catch these attempts. It requires system privileges through Apple's Endpoint Security Framework and Full Disk Access, which are set up during installation. Alerts show the responsible process, the persisted item, and VirusTotal information, and you can allow or block each one. Your choices are saved as rules, and blocking an item removes it from the file system. BlockBlock also offers optional additional protections, including Notarization and Block Script modes, and Paste Protection to guard against malicious Terminal pastes. Settings can be adjusted from the status bar menu.
What's new
All release notesHomebrew cask blockblock 2.5.2 (sha256 7e5a332a4da6a22e8b494418c3cac241d24b43176c8bfc4bb2ef8bdc640bd4c7).