Skip to main content
Back to Blog

Author

Phil Stokes

Phil Stokes is a Research Engineer at SentinelOne, specializing in macOS threat intelligence, platform vulnerabilities and malware analysis. He began his journey into macOS security as a software developer, creating end user troubleshooting and security tools just at the time when macOS adware and commodity malware first began appearing on the platform. Phil has been closely following the development of macOS threats as well as researching Mac software and OS vulnerabilities since 2014.

Phil Stokes

Keep up with the latest

Blog posts by Phil Stokes

  • macOS MetaStealer | New Family of Obfuscated Go Infostealers Spread in Targeted Attacks 

    macOS MetaStealer | New Family of Obfuscated Go Infostealers Spread in Targeted Attacks

  • Protecting macOS |  7 Strategies for Enterprise Security in 2024

    Protecting macOS |  7 Strategies for Enterprise Security in 2024

  • DPRK Crypto Theft | macOS RustBucket Droppers Pivot to Deliver KandyKorn Payloads

    DPRK Crypto Theft | macOS RustBucket Droppers Pivot to Deliver KandyKorn Payloads

  • macOS Malware 2023 | A Deep Dive into Emerging Trends and Evolving Techniques

    macOS Malware 2023 | A Deep Dive into Emerging Trends and Evolving Techniques

  • Sonoma in the Spotlight | What's New and What's Missing in macOS 14

    Sonoma in the Spotlight | What's New and What's Missing in macOS 14

  • XLoader's Latest Trick | New macOS Variant Disguised as Signed OfficeNote App

    XLoader's Latest Trick | New macOS Variant Disguised as Signed OfficeNote App

  • Mac Admins | Why Apple's Silent Approach to Endpoint Security Should be a Wake-Up Call

    Mac Admins | Why Apple's Silent Approach to Endpoint Security Should be a Wake-Up Call

  • Apple Crimeware | Massive Rust Infostealer Campaign Aiming for macOS Sonoma Ahead of Public Release

    Apple Crimeware | Massive Rust Infostealer Campaign Aiming for macOS Sonoma Ahead of Public Release

  • BlueNoroff | How DPRK’s macOS RustBucket Seeks to Evade Analysis and Detection

    BlueNoroff | How DPRK’s macOS RustBucket Seeks to Evade Analysis and Detection

  • JokerSpy | Unknown Adversary Targeting Organizations with Multi-Stage macOS Malware

    JokerSpy | Unknown Adversary Targeting Organizations with Multi-Stage macOS Malware

  • macOS 14 Sonoma | Toughening up macOS for the Enterprise?

    macOS 14 Sonoma | Toughening up macOS for the Enterprise?

  • Geacon Brings Cobalt Strike Capabilities to macOS Threat Actors

    Geacon Brings Cobalt Strike Capabilities to macOS Threat Actors