Microsoft warns that data-stealing malware is “rapidly expanding beyond traditional Windows-focused campaigns” and targets Mac devices

• Microsoft warns that macOS now faces a rapidly expanding ecosystem of data theft and malware
• Threat actors use social engineering and malicious ads to deliver DMG installers with variants such as DigitStealer, MacSync, and AMOS.
• Attackers target browser sessions, cloud tokens, and developer credentials, while abusing legitimate tools like WhatsApp and Google Ads for propagation.

Gone are the days when Windows was always the number one target for cybercriminals; New research found that macOS is equally important, with users facing a “rapidly expanding” malware ecosystem, social engineering tactics, and legitimate but weaponized tools.

A Microsoft report found that hackers are using social engineering techniques such as ClickFix (faking a problem and offering a “fix”) and malicious advertising campaigns to deliver disk image installers (DMGs).