2024 macOS Malware Review | Infostealers, Backdoors, and APT Campaigns Targeting the Enterprise
Essential information
- Published
- 21/01/2025 09:23
- Modified
- 21/01/2025 09:51
- Tags
- 2025-01-21 macos
- Related entities
- 23 observables, 9 techniques (mitre), 6 malware, 3 others
Description
The year 2024 saw a significant increase in malware campaigns targeting macOS users in enterprise environments. Threats included infostealers disguised as business apps, sophisticated modular backdoors, and APT activities. Notable malware families included Amos Atomic infostealers, Backdoor Activator, LightSpy, BeaverTail, ToDoSwift, Hidden Risk, HZ RAT, CloudChat Infostealer, NotLockBit ransomware, CloudFake, and RustyAttr. These threats employed various tactics such as credential theft, data exfiltration, and remote access capabilities. The rise in cross-platform development frameworks and sophisticated attack techniques indicates a growing focus on macOS as a target for enterprise attacks, highlighting the need for robust endpoint detection and response capabilities.