Skip to main content
Back to Blog

Author

Phil Stokes

Phil Stokes is a Research Engineer at SentinelOne, specializing in macOS threat intelligence, platform vulnerabilities and malware analysis. He began his journey into macOS security as a software developer, creating end user troubleshooting and security tools just at the time when macOS adware and commodity malware first began appearing on the platform. Phil has been closely following the development of macOS threats as well as researching Mac software and OS vulnerabilities since 2014.

Phil Stokes

Keep up with the latest

Blog posts by Phil Stokes

  • Atomic Stealer | Threat Actor Spawns Second Variant of macOS Malware Sold on Telegram

    Atomic Stealer | Threat Actor Spawns Second Variant of macOS Malware Sold on Telegram

  • LockBit Ransomware: Protect Your macOS Today

    LockBit Ransomware: Protect Your macOS Today

  • Session Cookies, Keychains, SSH Keys and More | 7 Kinds of Data Malware Steals from macOS Users

    Session Cookies, Keychains, SSH Keys and More | 7 Kinds of Data Malware Steals from macOS Users

  • Hunting for Honkbox | Multistage macOS Cryptominer May Still Be Hiding

    Hunting for Honkbox | Multistage macOS Cryptominer May Still Be Hiding

  • macOS Payloads | 7 Prevalent and Emerging Obfuscation Techniques

    macOS Payloads | 7 Prevalent and Emerging Obfuscation Techniques

  • 7 Ways Threat Actors Deliver macOS Malware in the Enterprise

    7 Ways Threat Actors Deliver macOS Malware in the Enterprise

  • Top 10 macOS Malware Discoveries in 2022

    Top 10 macOS Malware Discoveries in 2022

  • V for Ventura | How Will Upgrading to macOS 13 Impact Organizations?

    V for Ventura | How Will Upgrading to macOS 13 Impact Organizations?

  • Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto

    Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto

  • XCSSET Malware Update | macOS Threat Actors Prepare for Life Without Python

    XCSSET Malware Update | macOS Threat Actors Prepare for Life Without Python

  • From the Front Lines | New macOS 'covid' Malware Masquerades as Apple, Wears Face of APT

    From the Front Lines | New macOS 'covid' Malware Masquerades as Apple, Wears Face of APT

  • Apple’s macOS Ventura | 7 New Security Changes to Be Aware Of

    Apple’s macOS Ventura | 7 New Security Changes to Be Aware Of