Date Author Title

ATOMIC MACOS STEALER

2026-08-02Brad DuncanAtomic MacOS (AMOS) stealer infection

ATOMIC

2026-08-02/a>Brad DuncanAtomic MacOS (AMOS) stealer infection

MACOS

2026-08-02/a>Brad DuncanAtomic MacOS (AMOS) stealer infection
2026-07-29/a>Johannes UllrichApple Patches Everything (July 2026)
2026-06-30/a>Johannes UllrichJune 2026 Apple Updates
2026-03-25/a>Johannes UllrichApple Patches (almost) everything again. March 2026 edition.
2025-09-15/a>Johannes UllrichApple Updates Everything - iOS/macOS 26 Edition
2025-07-29/a>Johannes UllrichApple Updates Everything: July 2025
2025-05-12/a>Johannes UllrichApple Updates Everything: May 2025 Edition
2025-03-31/a>Johannes UllrichApple Patches Everything: March 31st 2025 Edition
2025-03-11/a>Johannes UllrichApple Fixes Exploited WebKit Vulnerability in iOS, MacOS, visionOS and Safari
2024-12-11/a>Johannes UllrichApple Updates Everything (iOS, iPadOS, macOS, watchOS, tvOS, visionOS)
2024-10-28/a>Johannes UllrichApple Updates Everything
2024-10-07/a>Xavier MertensmacOS Sequoia: System/Network Admins, Hold On!
2024-07-30/a>Johannes UllrichApple Patches Everything. July 2024 Edition
2024-01-22/a>Johannes UllrichApple Updates Everything - New 0 Day in WebKit
2024-01-19/a>Xavier MertensmacOS Python Script Replacing Wallet Applications with Rogue Apps
2023-12-11/a>Johannes UllrichApple Patches Everything
2023-09-26/a>Johannes UllrichApple Releases MacOS Sonoma Including Numerous Security Patches
2023-09-11/a>Johannes UllrichApple fixes 0-Day Vulnerability in Older Operating Systems
2023-09-07/a>Johannes UllrichApple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities
2023-08-26/a>Xavier MertensmacOS: Who?s Behind This Network Connection?
2023-06-22/a>Johannes UllrichApple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari
2023-04-07/a>Johannes UllrichApple Patching Two 0-Day Vulnerabilities in iOS and macOS
2023-03-27/a>Johannes UllrichApple Updates Everything (including Studio Display)
2022-07-26/a>Xavier MertensHow is Your macOS Security Posture?
2022-07-20/a>Johannes UllrichApple Patches Everything Day
2022-03-31/a>Johannes UllrichApple Patches Actively Exploited Vulnerability in macOS, iOS and iPadOS,
2022-03-14/a>Johannes UllrichApple Updates Everything: MacOS 12.3, XCode 13.3, tvOS 15.4, watchOS 8.5, iPadOS 15.4 and more
2022-02-10/a>Johannes UllrichiOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched
2022-01-27/a>Johannes UllrichApple Patches Everything
2020-11-20/a>Xavier MertensMalicious Python Code and LittleSnitch Detection
2020-11-09/a>Xavier MertensHow Attackers Brush Up Their Malicious Scripts
2020-09-09/a>Johannes UllrichA First Look at macOS 11 Big Sur Network Traffic (New! Now with more GREASE!)
2018-11-27/a>Xavier MertensMore obfuscated shell scripts: Fake MacOS Flash update
2018-11-04/a>Pasquale StirparoBeyond good ol' LaunchAgent - part 1
2018-10-21/a>Pasquale StirparoBeyond good ol’ LaunchAgent - part 0
2018-06-29/a>Remco VerhoefCrypto community target of MacOS malware
2014-01-24/a>Chris MohanSecurity Update for OS X for CVE-2014-1252 http://support.apple.com/kb/HT6117
2012-05-05/a>Tony CarothersVulnerability Exploit for Snow Leopard
2010-06-15/a>Manuel Humberto Santander PelaezApple releases advisory for Mac OS X - Multiple vulnerabilities discovered

STEALER

2026-08-02/a>Brad DuncanAtomic MacOS (AMOS) stealer infection
2026-05-26/a>Brad DuncanPossible ACR Stealer From Page Impersonating Claude
2026-05-22/a>Xavier MertensCross-Platform NPM Stealer
2026-05-01/a>Brad DuncanMalicious Ad for Homebrew Leads to MacSync Stealer
2026-04-17/a>Brad DuncanLumma Stealer infection with Sectop RAT (ArechClient2)
2026-02-11/a>Xavier MertensWSL in the Malware Ecosystem
2026-02-04/a>Xavier MertensMalicious Script Delivering More Maliciousness
2026-01-14/a>Brad DuncanInfection repeatedly adds scheduled tasks and increases traffic to the same C2 domain
2025-10-23/a>Xavier MertensInfostealer Targeting Android Devices
2025-10-15/a>Xavier MertensClipboard Pictures Exfiltration in Python Infostealer
2025-05-06/a>Xavier MertensPython InfoStealer with Embedded Phishing Webserver
2025-04-15/a>Xavier MertensOnline Services Again Abused to Exfiltrate Data
2025-01-29/a>Xavier MertensFrom PowerShell to a Python Obfuscation Race!
2025-01-28/a>Xavier MertensFileless Python InfoStealer Targeting Exodus
2024-11-30/a>Xavier MertensFrom a Regular Infostealer to its Obfuscated Version
2024-11-22/a>Xavier MertensAn Infostealer Searching for « BIP-0039 » Data
2024-11-07/a>Xavier MertensSteam Account Checker Poisoned with Infostealer
2024-10-09/a>Xavier MertensFrom Perfctl to InfoStealer
2024-09-18/a>Xavier MertensPython Infostealer Patching Windows Exodus App
2024-08-27/a>Xavier MertensWhy Is Python so Popular to Infect Windows Hosts?
2024-07-26/a>Xavier MertensExelaStealer Delivered "From Russia With Love"
2024-05-31/a>Xavier Mertens"K1w1" InfoStealer Uses gofile.io for Exfiltration
2024-02-20/a>Xavier MertensPython InfoStealer With Dynamic Sandbox Detection
2024-01-25/a>Xavier MertensFacebook AdsManager Targeted by a Python Infostealer
2023-12-22/a>Xavier MertensShall We Play a Game?
2023-09-29/a>Xavier MertensAre You Still Storing Passwords In Plain Text Files?
2023-05-04/a>Xavier MertensInfostealer Embedded in a Word Document
2023-03-01/a>Xavier MertensPython Infostealer Targeting Gamers
2022-12-18/a>Guy BruneauInfostealer Malware with Double Extension
2022-08-11/a>Xavier MertensInfoStealer Script Based on Curl and NSudo
2022-04-06/a>Brad DuncanWindows MetaStealer Malware
2022-03-23/a>Brad DuncanArkei Variants: From Vidar to Mars Stealer
2022-03-09/a>Xavier MertensInfostealer in a Batch File
2021-12-21/a>Xavier MertensMore Undetected PowerShell Dropper
2021-12-01/a>Xavier MertensInfo-Stealer Using webhook.site to Exfiltrate Data
2021-07-09/a>Brad DuncanHancitor tries XLL as initial malware file
2021-06-30/a>Brad DuncanJune 2021 Forensic Contest: Answers and Analysis
2021-04-06/a>Jan KoprivaMalspam with Lokibot vs. Outlook and RFCs
2021-03-31/a>Xavier MertensQuick Analysis of a Modular InfoStealer
2019-11-27/a>Brad DuncanFinding an Agent Tesla malware sample
2019-10-09/a>Brad DuncanWhat data does Vidar malware steal from an infected host?
2019-01-24/a>Brad DuncanMalspam with Word docs uses macro to run Powershell script and steal system data
2017-03-08/a>Xavier MertensNot All Malware Samples Are Complex