Microsoft warns that infostealer malware is ‘rapidly expanding beyond traditional Windows-focused campaigns’ to target Mac devices

• Microsoft warns that macOS is now facing a rapidly growing malware and infostealer ecosystem
• Threat actors use social engineering and malicious ads to deliver DMG installers with variants such as DigitStealer, MacSync and AMOS
• Attackers target browser sessions, skytokens and developer credentials while misusing legitimate tools like WhatsApp and Google Ads for propagation

Gone are the days when Windows was always the biggest target for cybercriminals – as new research has found that macOS is just as important, with users facing a “rapidly expanding” ecosystem of malware, social engineering tactics and legitimate but weaponized tools.

A Microsoft report found that hackers use social engineering techniques like ClickFix (faking a problem and offering a “fix”) and malicious advertising campaigns to deliver disk image (DMG) installers.