Hackers Deploy FlutterShell Backdoor Through Malvertising Campaigns
Threat actors operating under the CL-CRI-1089 cluster have significantly escalated their macOS targeting by deploying a new backdoor dubbed FlutterShell.
This campaign, tracked as...
JINX-0164 Hackers Deploy macOS Malware in Attacks on Cryptocurrency Firms
A sophisticated cyber campaign orchestrated by a previously undocumented threat group dubbed JINX-0164.
Active since mid-2025, this financially motivated actor primarily targets cryptocurrency organizations and...
North Korean APT Deploys macOS Malware to Steal Crypto Wallets and SSH Keys
The North Korean advanced persistent threat (APT) group known as Sapphire Sleet has launched a highly sophisticated malware campaign targeting macOS environments.
Active since...
Fake Google Software Update Used by macOS Malware For Persistence
Information-stealing malware targeting macOS continues to evolve rapidly. Security researchers at SentinelOne recently discovered a new variant of the SHub Stealer family dubbed "Reaper."...
New ClickFix Campaign Targets macOS Users With Fake Disk Cleanup Tools
Cybersecurity researchers have uncovered a new iteration of the ClickFix campaign that specifically targets macOS users through deceptive disk cleanup and troubleshooting guides.
Threat...