The args value in the data from the command and control server ( upbuchupsf) looks similar to an affiliate code, often used by adware.
No admin account on mac m1 In Big Sur, external booting of validly signed macOS installers and macOS boot volumes is now permitted by default.
