macOSCrashStealer: notarized malware for macOS
CrashStealer is a macOS infostealer disguised as a videoconferencing app. It abuses Apple’s own trusted mechanisms to sneak onto your computer unnoticed.
ClickFix on macOS: how Apple users are being scammed
ClickFix attacks, which were once seen mostly on Windows, are now spreading to macOS. We break down the mechanics of the attack, and ways to protect your device.
Crypto thieves ramping up attacks on Apple users
We’ve discovered over two dozen phishing apps mimicking popular crypto wallets right in the official App Store. Here’s a breakdown of the new waves of attacks targeting iPhone and Mac users and their crypto holdings.
infostealersMalware disguised as AI agents
Threat actors are promoting pages containing malicious instructions for installing AI agents intended for workflow automation.
Stealthy malware masking its activity, deploying infostealer
Cybercriminals are distributing malware that deploys an infostealer and masks its activity in network and system logs.
Malware hiding in a 3D model
How automation turns legitimate tools into a channel for malware delivery.
Infostealer has entered the chat
A new wave of ClickFix attacks spreading a macOS infostealer are posting malicious user guides on the official ChatGPT website by piggybacking the chatbot’s chat-sharing feature.
AndroidPixnapping vulnerability: unblockable screenshots of your Android phone
Pixnapping is an Android vulnerability discovered by researchers that allows apps to steal passwords, one-time codes, and other confidential information from the screen without any special permissions from the operating system. How does it work, and what can you do to protect yourself?
Lessons learned from the trojanized KeePass incident
A popular password manager was modified to allow attackers to steal passwords and encrypt users’ data. How to protect home computers and corporate systems from this threat?