SentinelLabs Logo RGB WhitePurp
ABOUT
CONTACT
VISIT SENTINELONE.COM

Phil Stokes

Phil Stokes is a Research Engineer at SentinelOne, specializing in macOS threat intelligence, platform vulnerabilities and malware analysis. He began his journey into macOS security as a software developer, creating end user troubleshooting and security tools just at the time when macOS adware and commodity malware first began appearing on the platform. Phil has been closely following the development of macOS threats as well as researching Mac software and OS vulnerabilities since 2014.
1. Quintero Twitter
labs

Automated macOS malware submissions “infecting” VirusTotal

Phil Stokes / August 2, 2018

Fake submissions on VirusTotal appear to inflate hits for certain kinds of macOS malware

Read More
Calisto On Sierra
labs

We Nailed it! Calisto Detected installing Backdoor on macOS

Phil Stokes / July 23, 2018

Even SIP-protected Macs allow Calisto trojan to install a backdoor and to copy password and keychains. See a demo of how SentinelOne will protect you

Read More
The Weakest Link  When Admins Get Phished   MacOS “OSX.Dummy” Malware 1
labs

The Weakest Link: When Admins Get Phished | macOS “OSX.Dummy” Malware

Phil Stokes / July 9, 2018

The case of MacOS “OSX.Dummy” Malware - How social engineering can trick administrators, and what you can learn from t

Read More
Previous
1 … 18 19 20
Next

SentinelLabs

In the era of interconnectivity, when markets, geographies, and jurisdictions merge in the melting pot of the digital domain, the perils of the threat ecosystem become unparalleled. Crimeware families achieve an unparalleled level of technical sophistication, APT groups are competing in fully-fledged cyber warfare, while once decentralized and scattered threat actors are forming adamant alliances of operating as elite corporate espionage teams.

Recent Posts

  • fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet
    fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet
    April 23, 2026
  • LABScon25 Replay | Are Your Chinese Cameras Spying For You Or On You?
    LABScon25 Replay | Are Your Chinese Cameras Spying For You Or On You?
    April 22, 2026
  • Building an Adversarial Consensus Engine | Multi-Agent LLMs for Automated Malware Analysis
    Building an Adversarial Consensus Engine | Multi-Agent LLMs for Automated Malware Analysis
    March 19, 2026

Sign Up

Get notified when we post new content.

Thanks! Keep an eye out for new content!

  • Twitter
  • LinkedIn
©2026 SentinelOne, All Rights Reserved.