New MacSync Stealer version is executed via a signed and notarized Swift application, eliminating the need for direct terminal interaction.

Mac malware campaign uses fake AI chat results to deliver AMOS through terminal commands, security researchers report.

While reviewing the detections of its in-house YARA rules, Jamf Threat Labs claims it observed a signed and notarized stealer that did not follow the typical execution chains seen in the past.

MacSync stealer malware bypasses macOS Gatekeeper protections, exposing Apple users to credential theft and growing macOS ...

We’ve recently seen how ChatGPT was used to trick Mac users into installing MacStealer, and now a different tactic ...

MacSync Stealer, by contrast, is downloaded from an ordinary-looking utility URL as a code-signed and notarized Swift application. Once the user initiates installation, the dropper retrieves its ...

While Apple's Macs aren't targeted by hackers as often as Windows PCs, they're far from impenetrable. Security researchers at Check Point Research recently pushed out an alert warning 100 million ...

Artificial intelligence (AI) is making life easier not just for us but also for cybercriminals. It is enabling them to create elaborate campaigns to deceive people, efforts that would otherwise take ...

Another day, another macOS malware is trying to actively exploit your Mac. This time, North Korean hackers are using fake job offers hidden in updates to popular apps like Zoom and Google Chrome to ...

A dangerous new malware campaign is targeting Mac users worldwide. Security researchers at CrowdStrike uncovered Shamos, a new variant of the Atomic macOS Stealer (AMOS), developed by a cybercriminal ...

New scan options and external drive scanning help detect and block infostealers, APTs and zero-hour threats SANTA CLARA, Calif., Dec. 11, 2025 /PRNewswire/ -- Malwarebytes, a global leader in online ...

Proofpoint has identified a new MacOS malware delivered via web inject campaigns that researchers dubbed “FrigidStealer.” The data protection company says the web inject campaign landscape is ...