Skip to main content
Back to Blog

Author

Phil Stokes

Phil Stokes is a Research Engineer at SentinelOne, specializing in macOS threat intelligence, platform vulnerabilities and malware analysis. He began his journey into macOS security as a software developer, creating end user troubleshooting and security tools just at the time when macOS adware and commodity malware first began appearing on the platform. Phil has been closely following the development of macOS threats as well as researching Mac software and OS vulnerabilities since 2014.

Phil Stokes

Keep up with the latest

Blog posts by Phil Stokes

  • Inside Safari Extensions | Malicious Plugins Remain on Mojave

    Inside Safari Extensions | Malicious Plugins Remain on Mojave

  • Inside Safari Extensions | Malware's Golden Key to User Data

    Inside Safari Extensions | Malware's Golden Key to User Data

  • 5 “Safe Computing” Practices for macOS and Why They Aren’t Enough

    5 “Safe Computing” Practices for macOS and Why They Aren’t Enough

  • Mojave Security Can Be Bypassed With SSH Keygen Wrapper

    Mojave Security Can Be Bypassed With SSH Keygen Wrapper

  • On the Trail of OSX.FairyTale | Adware Playing at Malware

    On the Trail of OSX.FairyTale | Adware Playing at Malware

  • OSX.Fruitfly recycled | macOS still vulnerable to ‘old’ Perl script

    OSX.Fruitfly recycled | macOS still vulnerable to ‘old’ Perl script

  • Command Line Intrusion | Mojave Blocks Admins, Too

    Command Line Intrusion | Mojave Blocks Admins, Too

  • Automated macOS malware submissions "infecting" VirusTotal

    Automated macOS malware submissions "infecting" VirusTotal

  • We Nailed it! Calisto Detected installing Backdoor on macOS

    We Nailed it! Calisto Detected installing Backdoor on macOS

  • The Weakest Link: When Admins Get Phished | macOS “OSX.Dummy” Malware

    The Weakest Link: When Admins Get Phished | macOS “OSX.Dummy” Malware