Macs Under Siege: New Infostealers Spread via WhatsApp & Fake Apps

Microsoft Defender researchers report a surge in infostealer campaigns that have expanded beyond Windows into macOS and cross-platform tool abuse, detailing native macOS stealers (e.g., DigitStealer, MacSync, AMOS), a malicious PDF editor (Crystal PDF), and a Delphi-based worm (Eternidade) that leverages WhatsApp for propagation; attackers use fileless execution, AppleScript, Python automation, living-off-the-land techniques, and social engineering to harvest credentials, browser session data, keychain secrets, and developer artifacts.