Infostealer Attacks Hit macOS, Abusing Python and Trusted Platforms

The report describes a spike in macOS- and Windows-focused infostealer campaigns leveraging social engineering, fake installers, malvertising, and Python-based payloads to steal browser credentials, keychain entries, cloud developer keys, and cryptocurrency wallets; it names families (DigitStealer, MacSync, AMOS, PXA, Eternidade), documents delivery mechanisms and evasion techniques (fileless execution, AppleScript/JXA, obfuscated Python, DLL sideloading), and publishes SHA-256 hashes and domains as IOCs while recommending detection and mitigation controls.