This is part 21 in the series of “Beyond the good ol’ LaunchAgents”, where I try to collect various persistence techniques for macOS. For more background check the introduction. This method was also documented by Patrick Wardle, in his original Methods of Malware Persistence white paper and also at MITRE ATT&CK®. When we restart macOS, we are presented with the following window: I guess, most users keep it selected, and then macOS will reopen all apps.
