A Launch Agent is a macOS background service managed by launchd, commonly configured to start when a user logs in or to run for that user’s session. Its settings are typically stored in a property list (PLIST) file in a LaunchAgents directory. System-wide services that start at boot are generally configured as Launch Daemons, a related but distinct mechanism.
Because these services can start programs automatically, attackers may use or install a Launch Agent to keep unauthorized software running after a login or restart. If an unfamiliar process such as a cryptocurrency miner is found, inspect its launch configuration, executable path, and ownership, then verify whether it is authorized before removing it. A suspicious agent is a useful persistence clue, but does not by itself prove who installed it or what else may have been accessed.