Phil Stokes is a Research Engineer at SentinelOne, specializing in macOS threat intelligence, platform vulnerabilities and malware analysis. He began his journey into macOS security as a software developer, creating end user troubleshooting and security tools just at the time when macOS adware and commodity malware first began appearing on the platform. Phil has been closely following the development of macOS threats as well as researching Mac software and OS vulnerabilities since 2014.
We show how to statically reverse run-only AppleScripts for the first time, and in the process reveal new IoCs of a long-running macOS Cryptominer campaign.
CISA offers tool to aid IR teams in wake of SolarWinds, a COVID-19 testing lab is taken out by ransomware, and education charity GetSchooled gets pwned.
Facebook fingers Vietnamese company behind APT32 activity, Russian APTs exploit critical VMware bug, and COVID vaccine approval body is hit by cyberattack.
Vietnamese-linked APT group OceanLotus have innovated and imitated in their latest macOS trojan, while also leaving a mysterious hard-coded calling card.
Users invited to give feedback on DoH security feature, REvil hits managed web hosting provider for $500K, and video-conferencing software lets in "ghosts".
Macs worldwide became unresponsive last week while attempting to launch 3rd party apps. What caused the issue and what does it mean for your Mac's security?
Russian cops make a rare catch of prolific malware developer, Ragnar Locker goes on the rampage and leaked data threatens cannabis growers with exposure.
