Phil Stokes, Author at SentinelOne

V for Ventura | How Will Upgrading to macOS 13 Impact Organizations?

Phil Stokes / October 26, 2022

macOS 13 Ventura has arrived! Read about the broader impacts of upgrading to macOS 13 on users, admins, and security teams.

labs

Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto

Dinesh Devadoss & Phil Stokes / September 26, 2022

First Coinbase, now Crypto.com. Lazarus campaign targets more crypto exchange platform job seekers with multi-stage malware.

XCSSET Malware Update Threat Actors Prepare For Life Without Python 4

labs

XCSSET Malware Update | macOS Threat Actors Prepare for Life Without Python

Phil Stokes & Dinesh Devadoss / August 22, 2022

New domains and new behavioral indicators, but malware authors stick to tried and tested architecture despite Apple’s updates.

labs

From the Front Lines | New macOS ‘covid’ Malware Masquerades as Apple, Wears Face of APT

Phil Stokes & Dinesh Devadoss / July 6, 2022

A fake VPN delivers a Sliver implant with a further malicious payload. APT or Red Team? The IoCs can look the same to defenders.

labs

Apple’s macOS Ventura | 7 New Security Changes to Be Aware Of

Phil Stokes / June 10, 2022

With macOS 13, Apple have made some bold and potentially disruptive changes to Mac security. We explore them here.

Use Of Obfuscated Beacons In ‘pymafka Supply Chain Attack Signals A New Trend In MacOS Attack TTPs 1

labs

Security & Intelligence

Use of Obfuscated Beacons in ‘pymafka’ Supply Chain Attack Signals a New Trend in macOS Attack TTPs

Phil Stokes / May 25, 2022

A new typosquatting attack against the PyPI repository targets enterprise Macs with a distinctive obfuscation method.

The Art And Science Of MacOS Malware Hunting With Radare2 Leveraging Xrefs YARA Zignatures 11

labs

Security Research

The Art and Science of macOS Malware Hunting with radare2 | Leveraging Xrefs, YARA and Zignatures

Phil Stokes / March 21, 2022

In the next part of our series on reversing macOS malware, we dig into identifying reused code across malware samples for hunting and detection.

labs

The Good, the Bad and the Ugly in Cybersecurity – Week 6

Phil Stokes / February 11, 2022

Russian cops take down 4 notorious darknet markets, hackers breach 500 online stores, and APTs plant fake evidence to incriminate civil rights activists.

Why Everything You Thought You Knew About MacOS Security Is Wrong 1

labs

10 Assumptions About macOS Security That Put Your Business At Risk

Phil Stokes / February 7, 2022

Keep your macOS devices safe by learning how to avoid the most common security risks from malware, adware, lack of visibility and more.

Sneaky Spies And Backdoor RATs SysJoker And DazzleSpy Malware Target MacOS 4

labs

How SysJoker and DazzleSpy Malware Target macOS

Phil Stokes / February 1, 2022

Targeting macOS users with cross-platform malware and leveraging OS vulnerabilities, threat actors begin 2022 by continuing the trends we saw last year.