PamStealer: New macOS Infostealer with PAM Password Validation
PamStealer is a macOS information stealer discovered by Jamf Threat Labs that uses fake Maccy sites for distribution. It employs a two-stage…
Tag: macOS
Jamf Threat Labs: macOS Malware Analysis
Jamf Threat Labs is a security research team that disclosed AmnesiaStealer, a macOS malware with a stream_module that uses Chrome DevTools Protocol…
Maccy: Legitimate macOS Clipboard Manager Impersonated by Malware
Maccy is an open-source clipboard manager for macOS. Its official website is maccy.app. Fake sites like maccyapp[.]com and maccyapp[.]net distribute PamStealer malware…
CountLoader: Multi-Platform Loader with Persistence and Reconnaissance
CountLoader is a malware family delivered via DOUBLECUP, with Windows and macOS variants. It establishes persistence via scheduled tasks, audits browser extensions…
macOS Screen Sharing Flaw Exploited
Apple macOS Screen Sharing vulnerability (CVE-2026-65400) allows authentication bypass and was used to deliver Monero miner.
AirDrop and Quick Share Flaws Let Nearby Attackers Crash Devices and Bypass Security Checks
Researchers from the CISPA Helmholtz Center for Information Security have uncovered six security flaws in Apple's AirDrop and Google/Samsung's Quick Share wireless…
Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs
Apple has released security updates for iOS, macOS, and Safari, patching over 30 vulnerabilities, including four WebKit flaws discovered using AI tools…
Gaslight macOS Malware Uses Prompt Injection to Bypass AI Analysis
A new macOS malware called Gaslight uses embedded prompt injection strings and fake debugging data to confuse AI-assisted malware analysis tools. It…
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Cybersecurity researchers have identified multiple ClickFix campaigns deploying three new malware loaders: BabaDeda Loader, Lorem Ipsum Loader, and Potemkin. These campaigns use…
Phexia Stealer: macOS Infostealer Delivered via ClickFix
Phexia Stealer is a macOS infostealer delivered via ClickFix campaigns targeting macOS users with fraudulent bot verification screens.