FAUTLReports

Catching macOS Stealers in the Wild

2026-04-01

Author: Pablo Redondo Castro

file_types:txt file_types:pdf file_types:bin file_types:python file_types:sh file_types:so techniques:sandbox file_types:doc file_types:xls techniques:data theft

[0day] From Spotlight to Apple Intelligence

2025-03-27

Objective-See

Author: Patrick Wardle

file_types:so techniques:persistence techniques:sandbox platforms:macos cve:cve-2024-54533 cve:cve-2025-31199

One ClickFix and LummaStealer reCAPTCHA’s Our Attention - Part 1

2025-01-30

RevEng.AI

file_types:dll techniques:phishing file_types:powershell malware_types:loader file_types:html file_types:python malware_types:virus file_types:javascript techniques:sandbox file_types:iso

Latrodectus Affiliate Resumes Operations Using Brute Ratel C4 Post Operation Endgame

2024-06-24

RevEng.AI

malware_types:ransomware file_types:dll file_types:pdf malware_types:loader file_types:python file_types:javascript techniques:sandbox platforms:windows server techniques:string obfuscation file_types:msi

The Mac Malware of 2023

2024-01-01

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:ruby file_types:zip platforms:linux file_types:dat architecture:x86_64 file_types:python techniques:sandbox file_types:mach-o techniques:malware analysis tools

Analysis of CVE-2021-30860

2021-09-16

Objective-See

Author: Tom McGuire

architecture:x86_64 file_types:so techniques:sandbox platforms:macos platforms:ios file_types:mach-o disassembler:hopper cve:cve-2015-6778 cve:cve-2020-1910 cve:cve-2009-1858

Office Drama on macOS

2020-08-04

Objective-See

Author: Patrick Wardle

file_types:zip file_types:bin file_types:dat file_types:python file_types:so platforms:windows techniques:sandbox file_types:doc file_types:swift cve:cve-2019-1457

OSX.EvilQuest Uncovered (part one)

2020-06-29

Objective-See

Author: Patrick Wardle

malware_types:ransomware file_types:rar file_types:zip file_types:txt file_types:dat architecture:x86_64 file_types:python techniques:sandbox file_types:mach-o file_types:rtf

[0day] Abusing XLM Macros in SYLK Files

2019-11-03

Objective-See

Author: Patrick Wardle

file_types:so file_types:c malware_types:backdoor techniques:sandbox file_types:xml file_types:doc file_types:xls platforms:macos file_types:dylib

Rootpipe Reborn (Part II)

2019-04-24

Objective-See

file_types:bin file_types:so file_types:c techniques:sandbox techniques:privilege escalation platforms:macos platforms:ios file_types:objective-c cve:cve-2019-8565 cve:cve-2019-8513

Word to Your Mac

2018-12-05

Objective-See

file_types:bin file_types:python file_types:so malware_types:downloader platforms:windows techniques:sandbox file_types:xml file_types:doc platforms:macos file_types:dylib

[0day] Mojave's Sandbox is Leaky

2018-11-29

Objective-See

file_types:zip file_types:so techniques:sandbox file_types:swift platforms:macos

A Deceitful 'Doctor' in the Mac App Store

2018-09-07

Objective-See

file_types:zip file_types:bin architecture:x86_64 file_types:python file_types:sh file_types:so file_types:go malware_types:trojan techniques:sandbox file_types:json

Escaping the Microsoft Office Sandbox

2018-08-15

Objective-See

file_types:bin techniques:phishing file_types:powershell file_types:python file_types:so file_types:cmd techniques:sandbox file_types:xml platforms:macos file_types:docx

Who Moved My Pixels?!

2018-04-05

Objective-See

file_types:zip file_types:so file_types:go malware_types:backdoor file_types:js file_types:img techniques:sandbox platforms:macos debugger:lldb file_types:dylib

[0day] Bypassing Apple's System Integrity Protection

2016-12-01

Objective-See

malware_types:loader file_types:so file_types:go cloud_environments:vmware techniques:sandbox file_types:xml platforms:macos file_types:mach-o file_types:dylib file_types:objective-c

Are you from the Mac App Store?

2016-05-01

Objective-See

malware_types:ransomware file_types:so techniques:sandbox platforms:ios

Analysis of an Intrusive Cross-Platform Adware; OSX/Pirrit

2016-04-05

Objective-See

file_types:zip platforms:linux file_types:txt file_types:python file_types:sh techniques:sandbox techniques:privilege escalation malware_types:keylogger file_types:iso file_types:mach-o

Talking to Dridex (part 0) – inside the dropper

2015-11-10

CERT.PL

Author: CERT Polska

malware_families:dridex malware_types:dropper techniques:sandbox file_types:doc source_tag:analysis source_tag:malware

MMD-0034-2015 - Linux/DES.Downloader on Elasticsearch

2015-06-26

MalwareMustDie

Author: unixfreaxjp

platforms:linux techniques:system calls file_types:sh file_types:elf malware_types:downloader malware_types:virus malware_types:backdoor file_types:js file_types:java techniques:sandbox

Malware Analysis Reports