The guy over at Objective-See has written a full analysis report on how the new macOS DNS Hijacker: OSX/MaMi has the ability to change the DNS servers, take screenshots and even trigger mouse events. More information can be found using the link below.
https://objective-see.com/blog/blog_0x26.html
https://objective-see.com/blog/blog_0x26.html